java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.07_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 12:46:54,751 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:46:54,753 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:46:54,769 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:46:54,769 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:46:54,771 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:46:54,772 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:46:54,774 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:46:54,778 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:46:54,780 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:46:54,781 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:46:54,781 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:46:54,783 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:46:54,785 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:46:54,786 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:46:54,789 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:46:54,790 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:46:54,798 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:46:54,802 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:46:54,805 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:46:54,806 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:46:54,808 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:46:54,811 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:46:54,811 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:46:54,811 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:46:54,813 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:46:54,814 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:46:54,816 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:46:54,816 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:46:54,817 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:46:54,818 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:46:54,818 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:46:54,818 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:46:54,819 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:46:54,820 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:46:54,822 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:46:54,823 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 12:46:54,852 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:46:54,852 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:46:54,853 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:46:54,853 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:46:54,855 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 12:46:54,855 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 12:46:54,855 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 12:46:54,855 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:46:54,856 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:46:54,856 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:46:54,856 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:46:54,856 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:46:54,856 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:46:54,856 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:46:54,859 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:46:54,860 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:46:54,860 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:46:54,860 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:46:54,860 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:46:54,862 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:46:54,862 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:46:54,862 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:46:54,862 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:46:54,863 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:46:54,863 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:46:54,863 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:46:54,863 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:46:54,863 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 12:46:54,865 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:46:54,865 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:46:54,867 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:46:54,930 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:46:54,943 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:46:54,948 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:46:54,950 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:46:54,950 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:46:54,951 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.07_false-unreach-call.i.cil.c [2018-11-23 12:46:55,020 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e600071e/335155dbe62d44229edfe354a00fe48f/FLAGe6bd78c4a [2018-11-23 12:46:55,616 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:46:55,618 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.07_false-unreach-call.i.cil.c [2018-11-23 12:46:55,653 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e600071e/335155dbe62d44229edfe354a00fe48f/FLAGe6bd78c4a [2018-11-23 12:46:55,837 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e600071e/335155dbe62d44229edfe354a00fe48f [2018-11-23 12:46:55,846 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:46:55,847 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:46:55,848 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:46:55,849 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:46:55,852 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:46:55,854 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:46:55" (1/1) ... [2018-11-23 12:46:55,857 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@29b7542c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:55, skipping insertion in model container [2018-11-23 12:46:55,857 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:46:55" (1/1) ... [2018-11-23 12:46:55,868 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:46:55,941 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:46:56,562 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:46:56,580 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:46:56,876 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:46:56,908 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:46:56,909 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56 WrapperNode [2018-11-23 12:46:56,909 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:46:56,910 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:46:56,911 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:46:56,911 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:46:56,921 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:56,975 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:56,998 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:46:56,999 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:46:56,999 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:46:56,999 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:46:57,011 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,012 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,031 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,034 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,147 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,165 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,172 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... [2018-11-23 12:46:57,184 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:46:57,184 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:46:57,184 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:46:57,185 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:46:57,188 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:46:57,254 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 12:46:57,254 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:46:57,254 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:46:57,254 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 12:46:57,255 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 12:46:57,256 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 12:46:57,256 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 12:46:57,256 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 12:46:57,256 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 12:46:57,256 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 12:46:57,257 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 12:46:57,257 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:46:57,257 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:46:57,257 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:46:57,257 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:46:57,909 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:46:57,910 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:47:00,406 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:47:00,407 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 12:47:00,407 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:47:00 BoogieIcfgContainer [2018-11-23 12:47:00,407 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:47:00,409 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:47:00,409 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:47:00,412 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:47:00,413 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:46:55" (1/3) ... [2018-11-23 12:47:00,414 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@faa9c63 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:47:00, skipping insertion in model container [2018-11-23 12:47:00,414 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:46:56" (2/3) ... [2018-11-23 12:47:00,414 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@faa9c63 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:47:00, skipping insertion in model container [2018-11-23 12:47:00,415 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:47:00" (3/3) ... [2018-11-23 12:47:00,416 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.07_false-unreach-call.i.cil.c [2018-11-23 12:47:00,427 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:47:00,437 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:47:00,456 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:47:00,491 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 12:47:00,492 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:47:00,492 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:47:00,492 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:47:00,492 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:47:00,492 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:47:00,493 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:47:00,493 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:47:00,493 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:47:00,518 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states. [2018-11-23 12:47:00,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 12:47:00,528 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:00,529 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:00,532 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:00,538 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:00,538 INFO L82 PathProgramCache]: Analyzing trace with hash 1546919168, now seen corresponding path program 1 times [2018-11-23 12:47:00,541 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:00,541 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:00,594 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:00,595 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:00,595 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:00,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:01,109 INFO L256 TraceCheckUtils]: 0: Hoare triple {160#true} call ULTIMATE.init(); {160#true} is VALID [2018-11-23 12:47:01,113 INFO L273 TraceCheckUtils]: 1: Hoare triple {160#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {160#true} is VALID [2018-11-23 12:47:01,114 INFO L273 TraceCheckUtils]: 2: Hoare triple {160#true} assume true; {160#true} is VALID [2018-11-23 12:47:01,114 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {160#true} {160#true} #632#return; {160#true} is VALID [2018-11-23 12:47:01,115 INFO L256 TraceCheckUtils]: 4: Hoare triple {160#true} call #t~ret138 := main(); {160#true} is VALID [2018-11-23 12:47:01,115 INFO L273 TraceCheckUtils]: 5: Hoare triple {160#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {160#true} is VALID [2018-11-23 12:47:01,116 INFO L256 TraceCheckUtils]: 6: Hoare triple {160#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {160#true} is VALID [2018-11-23 12:47:01,134 INFO L273 TraceCheckUtils]: 7: Hoare triple {160#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,150 INFO L273 TraceCheckUtils]: 8: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,164 INFO L273 TraceCheckUtils]: 9: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,179 INFO L273 TraceCheckUtils]: 10: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,196 INFO L273 TraceCheckUtils]: 11: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,210 INFO L273 TraceCheckUtils]: 12: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,225 INFO L273 TraceCheckUtils]: 13: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !false; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,239 INFO L273 TraceCheckUtils]: 14: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,253 INFO L273 TraceCheckUtils]: 15: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,269 INFO L273 TraceCheckUtils]: 16: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,278 INFO L273 TraceCheckUtils]: 17: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,293 INFO L273 TraceCheckUtils]: 18: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,302 INFO L273 TraceCheckUtils]: 19: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,309 INFO L273 TraceCheckUtils]: 20: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,315 INFO L273 TraceCheckUtils]: 21: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:01,317 INFO L273 TraceCheckUtils]: 22: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {163#(= 8464 |ssl3_accept_#t~mem32|)} is VALID [2018-11-23 12:47:01,317 INFO L273 TraceCheckUtils]: 23: Hoare triple {163#(= 8464 |ssl3_accept_#t~mem32|)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,318 INFO L273 TraceCheckUtils]: 24: Hoare triple {161#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,318 INFO L273 TraceCheckUtils]: 25: Hoare triple {161#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,318 INFO L273 TraceCheckUtils]: 26: Hoare triple {161#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,319 INFO L273 TraceCheckUtils]: 27: Hoare triple {161#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,319 INFO L273 TraceCheckUtils]: 28: Hoare triple {161#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,319 INFO L273 TraceCheckUtils]: 29: Hoare triple {161#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,320 INFO L273 TraceCheckUtils]: 30: Hoare triple {161#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,321 INFO L273 TraceCheckUtils]: 31: Hoare triple {161#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,321 INFO L273 TraceCheckUtils]: 32: Hoare triple {161#false} assume 8544 == #t~mem41;havoc #t~mem41; {161#false} is VALID [2018-11-23 12:47:01,321 INFO L273 TraceCheckUtils]: 33: Hoare triple {161#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,322 INFO L273 TraceCheckUtils]: 34: Hoare triple {161#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,322 INFO L273 TraceCheckUtils]: 35: Hoare triple {161#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {161#false} is VALID [2018-11-23 12:47:01,323 INFO L273 TraceCheckUtils]: 36: Hoare triple {161#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {161#false} is VALID [2018-11-23 12:47:01,323 INFO L273 TraceCheckUtils]: 37: Hoare triple {161#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {161#false} is VALID [2018-11-23 12:47:01,323 INFO L273 TraceCheckUtils]: 38: Hoare triple {161#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {161#false} is VALID [2018-11-23 12:47:01,323 INFO L273 TraceCheckUtils]: 39: Hoare triple {161#false} assume 8 == ~blastFlag~0; {161#false} is VALID [2018-11-23 12:47:01,324 INFO L273 TraceCheckUtils]: 40: Hoare triple {161#false} assume !false; {161#false} is VALID [2018-11-23 12:47:01,337 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:01,340 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:01,340 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:01,346 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 41 [2018-11-23 12:47:01,349 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:01,353 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:01,492 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:01,493 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:01,503 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:01,504 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:01,507 INFO L87 Difference]: Start difference. First operand 157 states. Second operand 4 states. [2018-11-23 12:47:03,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:03,636 INFO L93 Difference]: Finished difference Result 333 states and 558 transitions. [2018-11-23 12:47:03,636 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:03,637 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 41 [2018-11-23 12:47:03,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:03,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:03,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 558 transitions. [2018-11-23 12:47:03,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:03,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 558 transitions. [2018-11-23 12:47:03,688 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 558 transitions. [2018-11-23 12:47:04,830 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 558 edges. 558 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:04,857 INFO L225 Difference]: With dead ends: 333 [2018-11-23 12:47:04,858 INFO L226 Difference]: Without dead ends: 169 [2018-11-23 12:47:04,862 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:04,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2018-11-23 12:47:04,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 152. [2018-11-23 12:47:04,998 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:04,998 INFO L82 GeneralOperation]: Start isEquivalent. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:04,999 INFO L74 IsIncluded]: Start isIncluded. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:04,999 INFO L87 Difference]: Start difference. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:05,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:05,009 INFO L93 Difference]: Finished difference Result 169 states and 253 transitions. [2018-11-23 12:47:05,009 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 253 transitions. [2018-11-23 12:47:05,011 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:05,012 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:05,012 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:05,012 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:05,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:05,021 INFO L93 Difference]: Finished difference Result 169 states and 253 transitions. [2018-11-23 12:47:05,021 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 253 transitions. [2018-11-23 12:47:05,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:05,024 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:05,024 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:05,024 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:05,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2018-11-23 12:47:05,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 232 transitions. [2018-11-23 12:47:05,033 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 232 transitions. Word has length 41 [2018-11-23 12:47:05,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:05,034 INFO L480 AbstractCegarLoop]: Abstraction has 152 states and 232 transitions. [2018-11-23 12:47:05,034 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:05,034 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 232 transitions. [2018-11-23 12:47:05,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 12:47:05,036 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:05,037 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:05,037 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:05,037 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:05,037 INFO L82 PathProgramCache]: Analyzing trace with hash -1039083406, now seen corresponding path program 1 times [2018-11-23 12:47:05,038 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:05,038 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:05,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:05,040 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:05,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:05,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:05,253 INFO L256 TraceCheckUtils]: 0: Hoare triple {1086#true} call ULTIMATE.init(); {1086#true} is VALID [2018-11-23 12:47:05,254 INFO L273 TraceCheckUtils]: 1: Hoare triple {1086#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1086#true} is VALID [2018-11-23 12:47:05,254 INFO L273 TraceCheckUtils]: 2: Hoare triple {1086#true} assume true; {1086#true} is VALID [2018-11-23 12:47:05,255 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1086#true} {1086#true} #632#return; {1086#true} is VALID [2018-11-23 12:47:05,255 INFO L256 TraceCheckUtils]: 4: Hoare triple {1086#true} call #t~ret138 := main(); {1086#true} is VALID [2018-11-23 12:47:05,256 INFO L273 TraceCheckUtils]: 5: Hoare triple {1086#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {1086#true} is VALID [2018-11-23 12:47:05,256 INFO L256 TraceCheckUtils]: 6: Hoare triple {1086#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1086#true} is VALID [2018-11-23 12:47:05,258 INFO L273 TraceCheckUtils]: 7: Hoare triple {1086#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,259 INFO L273 TraceCheckUtils]: 8: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,260 INFO L273 TraceCheckUtils]: 9: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,266 INFO L273 TraceCheckUtils]: 10: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,266 INFO L273 TraceCheckUtils]: 11: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,267 INFO L273 TraceCheckUtils]: 12: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,267 INFO L273 TraceCheckUtils]: 13: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,268 INFO L273 TraceCheckUtils]: 14: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,268 INFO L273 TraceCheckUtils]: 15: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,269 INFO L273 TraceCheckUtils]: 16: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,269 INFO L273 TraceCheckUtils]: 17: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,270 INFO L273 TraceCheckUtils]: 18: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:05,271 INFO L273 TraceCheckUtils]: 19: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1089#(= |ssl3_accept_#t~mem29| 8464)} is VALID [2018-11-23 12:47:05,272 INFO L273 TraceCheckUtils]: 20: Hoare triple {1089#(= |ssl3_accept_#t~mem29| 8464)} assume 8480 == #t~mem29;havoc #t~mem29; {1087#false} is VALID [2018-11-23 12:47:05,273 INFO L273 TraceCheckUtils]: 21: Hoare triple {1087#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {1087#false} is VALID [2018-11-23 12:47:05,273 INFO L273 TraceCheckUtils]: 22: Hoare triple {1087#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,274 INFO L273 TraceCheckUtils]: 23: Hoare triple {1087#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,274 INFO L273 TraceCheckUtils]: 24: Hoare triple {1087#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {1087#false} is VALID [2018-11-23 12:47:05,275 INFO L273 TraceCheckUtils]: 25: Hoare triple {1087#false} ~skip~0 := 0; {1087#false} is VALID [2018-11-23 12:47:05,275 INFO L273 TraceCheckUtils]: 26: Hoare triple {1087#false} assume !false; {1087#false} is VALID [2018-11-23 12:47:05,276 INFO L273 TraceCheckUtils]: 27: Hoare triple {1087#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,276 INFO L273 TraceCheckUtils]: 28: Hoare triple {1087#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,277 INFO L273 TraceCheckUtils]: 29: Hoare triple {1087#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,277 INFO L273 TraceCheckUtils]: 30: Hoare triple {1087#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,277 INFO L273 TraceCheckUtils]: 31: Hoare triple {1087#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,277 INFO L273 TraceCheckUtils]: 32: Hoare triple {1087#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,278 INFO L273 TraceCheckUtils]: 33: Hoare triple {1087#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,278 INFO L273 TraceCheckUtils]: 34: Hoare triple {1087#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,278 INFO L273 TraceCheckUtils]: 35: Hoare triple {1087#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,278 INFO L273 TraceCheckUtils]: 36: Hoare triple {1087#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,279 INFO L273 TraceCheckUtils]: 37: Hoare triple {1087#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,279 INFO L273 TraceCheckUtils]: 38: Hoare triple {1087#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,279 INFO L273 TraceCheckUtils]: 39: Hoare triple {1087#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,279 INFO L273 TraceCheckUtils]: 40: Hoare triple {1087#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,280 INFO L273 TraceCheckUtils]: 41: Hoare triple {1087#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,280 INFO L273 TraceCheckUtils]: 42: Hoare triple {1087#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,280 INFO L273 TraceCheckUtils]: 43: Hoare triple {1087#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,280 INFO L273 TraceCheckUtils]: 44: Hoare triple {1087#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,281 INFO L273 TraceCheckUtils]: 45: Hoare triple {1087#false} assume 8544 == #t~mem41;havoc #t~mem41; {1087#false} is VALID [2018-11-23 12:47:05,281 INFO L273 TraceCheckUtils]: 46: Hoare triple {1087#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,281 INFO L273 TraceCheckUtils]: 47: Hoare triple {1087#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,282 INFO L273 TraceCheckUtils]: 48: Hoare triple {1087#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {1087#false} is VALID [2018-11-23 12:47:05,282 INFO L273 TraceCheckUtils]: 49: Hoare triple {1087#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {1087#false} is VALID [2018-11-23 12:47:05,282 INFO L273 TraceCheckUtils]: 50: Hoare triple {1087#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {1087#false} is VALID [2018-11-23 12:47:05,283 INFO L273 TraceCheckUtils]: 51: Hoare triple {1087#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {1087#false} is VALID [2018-11-23 12:47:05,283 INFO L273 TraceCheckUtils]: 52: Hoare triple {1087#false} assume 8 == ~blastFlag~0; {1087#false} is VALID [2018-11-23 12:47:05,283 INFO L273 TraceCheckUtils]: 53: Hoare triple {1087#false} assume !false; {1087#false} is VALID [2018-11-23 12:47:05,290 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:05,290 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:05,290 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:05,292 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 54 [2018-11-23 12:47:05,292 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:05,293 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:05,412 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:05,412 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:05,413 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:05,413 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:05,414 INFO L87 Difference]: Start difference. First operand 152 states and 232 transitions. Second operand 4 states. [2018-11-23 12:47:06,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:06,897 INFO L93 Difference]: Finished difference Result 296 states and 449 transitions. [2018-11-23 12:47:06,897 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:06,897 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 54 [2018-11-23 12:47:06,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:06,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:06,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-23 12:47:06,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:06,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-23 12:47:06,909 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 449 transitions. [2018-11-23 12:47:07,754 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:07,762 INFO L225 Difference]: With dead ends: 296 [2018-11-23 12:47:07,762 INFO L226 Difference]: Without dead ends: 169 [2018-11-23 12:47:07,764 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:07,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2018-11-23 12:47:07,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 152. [2018-11-23 12:47:07,819 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:07,819 INFO L82 GeneralOperation]: Start isEquivalent. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:07,819 INFO L74 IsIncluded]: Start isIncluded. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:07,820 INFO L87 Difference]: Start difference. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:07,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:07,828 INFO L93 Difference]: Finished difference Result 169 states and 252 transitions. [2018-11-23 12:47:07,828 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 252 transitions. [2018-11-23 12:47:07,829 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:07,829 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:07,830 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:07,830 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:07,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:07,839 INFO L93 Difference]: Finished difference Result 169 states and 252 transitions. [2018-11-23 12:47:07,839 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 252 transitions. [2018-11-23 12:47:07,840 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:07,840 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:07,840 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:07,841 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:07,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2018-11-23 12:47:07,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 231 transitions. [2018-11-23 12:47:07,848 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 231 transitions. Word has length 54 [2018-11-23 12:47:07,848 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:07,848 INFO L480 AbstractCegarLoop]: Abstraction has 152 states and 231 transitions. [2018-11-23 12:47:07,849 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:07,849 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 231 transitions. [2018-11-23 12:47:07,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:47:07,850 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:07,850 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:07,851 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:07,851 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:07,851 INFO L82 PathProgramCache]: Analyzing trace with hash -7342962, now seen corresponding path program 1 times [2018-11-23 12:47:07,851 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:07,851 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:07,853 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:07,853 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:07,854 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:07,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:08,081 INFO L256 TraceCheckUtils]: 0: Hoare triple {1968#true} call ULTIMATE.init(); {1968#true} is VALID [2018-11-23 12:47:08,081 INFO L273 TraceCheckUtils]: 1: Hoare triple {1968#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1968#true} is VALID [2018-11-23 12:47:08,082 INFO L273 TraceCheckUtils]: 2: Hoare triple {1968#true} assume true; {1968#true} is VALID [2018-11-23 12:47:08,082 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1968#true} {1968#true} #632#return; {1968#true} is VALID [2018-11-23 12:47:08,083 INFO L256 TraceCheckUtils]: 4: Hoare triple {1968#true} call #t~ret138 := main(); {1968#true} is VALID [2018-11-23 12:47:08,083 INFO L273 TraceCheckUtils]: 5: Hoare triple {1968#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {1968#true} is VALID [2018-11-23 12:47:08,083 INFO L256 TraceCheckUtils]: 6: Hoare triple {1968#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1968#true} is VALID [2018-11-23 12:47:08,084 INFO L273 TraceCheckUtils]: 7: Hoare triple {1968#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1968#true} is VALID [2018-11-23 12:47:08,084 INFO L273 TraceCheckUtils]: 8: Hoare triple {1968#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1968#true} is VALID [2018-11-23 12:47:08,084 INFO L273 TraceCheckUtils]: 9: Hoare triple {1968#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1968#true} is VALID [2018-11-23 12:47:08,084 INFO L273 TraceCheckUtils]: 10: Hoare triple {1968#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1968#true} is VALID [2018-11-23 12:47:08,084 INFO L273 TraceCheckUtils]: 11: Hoare triple {1968#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1968#true} is VALID [2018-11-23 12:47:08,085 INFO L273 TraceCheckUtils]: 12: Hoare triple {1968#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1968#true} is VALID [2018-11-23 12:47:08,085 INFO L273 TraceCheckUtils]: 13: Hoare triple {1968#true} assume !false; {1968#true} is VALID [2018-11-23 12:47:08,089 INFO L273 TraceCheckUtils]: 14: Hoare triple {1968#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1970#(= |ssl3_accept_#t~mem24| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:08,090 INFO L273 TraceCheckUtils]: 15: Hoare triple {1970#(= |ssl3_accept_#t~mem24| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,091 INFO L273 TraceCheckUtils]: 16: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem25;havoc #t~mem25; {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,092 INFO L273 TraceCheckUtils]: 17: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} call write~int(1, ~s.base, 36 + ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,092 INFO L273 TraceCheckUtils]: 18: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,093 INFO L273 TraceCheckUtils]: 19: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,095 INFO L273 TraceCheckUtils]: 20: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,097 INFO L273 TraceCheckUtils]: 21: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:08,098 INFO L273 TraceCheckUtils]: 22: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {1972#(not (= 12292 |ssl3_accept_#t~mem62|))} is VALID [2018-11-23 12:47:08,099 INFO L273 TraceCheckUtils]: 23: Hoare triple {1972#(not (= 12292 |ssl3_accept_#t~mem62|))} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,099 INFO L273 TraceCheckUtils]: 24: Hoare triple {1969#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,099 INFO L273 TraceCheckUtils]: 25: Hoare triple {1969#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {1969#false} is VALID [2018-11-23 12:47:08,100 INFO L273 TraceCheckUtils]: 26: Hoare triple {1969#false} ~skip~0 := 0; {1969#false} is VALID [2018-11-23 12:47:08,100 INFO L273 TraceCheckUtils]: 27: Hoare triple {1969#false} assume !false; {1969#false} is VALID [2018-11-23 12:47:08,100 INFO L273 TraceCheckUtils]: 28: Hoare triple {1969#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,100 INFO L273 TraceCheckUtils]: 29: Hoare triple {1969#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,101 INFO L273 TraceCheckUtils]: 30: Hoare triple {1969#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,101 INFO L273 TraceCheckUtils]: 31: Hoare triple {1969#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,101 INFO L273 TraceCheckUtils]: 32: Hoare triple {1969#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,102 INFO L273 TraceCheckUtils]: 33: Hoare triple {1969#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,102 INFO L273 TraceCheckUtils]: 34: Hoare triple {1969#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,102 INFO L273 TraceCheckUtils]: 35: Hoare triple {1969#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,102 INFO L273 TraceCheckUtils]: 36: Hoare triple {1969#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,103 INFO L273 TraceCheckUtils]: 37: Hoare triple {1969#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,103 INFO L273 TraceCheckUtils]: 38: Hoare triple {1969#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,103 INFO L273 TraceCheckUtils]: 39: Hoare triple {1969#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,103 INFO L273 TraceCheckUtils]: 40: Hoare triple {1969#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,104 INFO L273 TraceCheckUtils]: 41: Hoare triple {1969#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,104 INFO L273 TraceCheckUtils]: 42: Hoare triple {1969#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,104 INFO L273 TraceCheckUtils]: 43: Hoare triple {1969#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,104 INFO L273 TraceCheckUtils]: 44: Hoare triple {1969#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,105 INFO L273 TraceCheckUtils]: 45: Hoare triple {1969#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,105 INFO L273 TraceCheckUtils]: 46: Hoare triple {1969#false} assume 8544 == #t~mem41;havoc #t~mem41; {1969#false} is VALID [2018-11-23 12:47:08,105 INFO L273 TraceCheckUtils]: 47: Hoare triple {1969#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,105 INFO L273 TraceCheckUtils]: 48: Hoare triple {1969#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,106 INFO L273 TraceCheckUtils]: 49: Hoare triple {1969#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {1969#false} is VALID [2018-11-23 12:47:08,106 INFO L273 TraceCheckUtils]: 50: Hoare triple {1969#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {1969#false} is VALID [2018-11-23 12:47:08,106 INFO L273 TraceCheckUtils]: 51: Hoare triple {1969#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {1969#false} is VALID [2018-11-23 12:47:08,106 INFO L273 TraceCheckUtils]: 52: Hoare triple {1969#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {1969#false} is VALID [2018-11-23 12:47:08,107 INFO L273 TraceCheckUtils]: 53: Hoare triple {1969#false} assume 8 == ~blastFlag~0; {1969#false} is VALID [2018-11-23 12:47:08,107 INFO L273 TraceCheckUtils]: 54: Hoare triple {1969#false} assume !false; {1969#false} is VALID [2018-11-23 12:47:08,111 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:08,111 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:08,111 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:47:08,112 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2018-11-23 12:47:08,112 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:08,112 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-23 12:47:08,194 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:08,195 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:47:08,195 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:47:08,195 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:08,196 INFO L87 Difference]: Start difference. First operand 152 states and 231 transitions. Second operand 5 states. [2018-11-23 12:47:10,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,014 INFO L93 Difference]: Finished difference Result 300 states and 457 transitions. [2018-11-23 12:47:10,014 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:47:10,015 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2018-11-23 12:47:10,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:10,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:47:10,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 439 transitions. [2018-11-23 12:47:10,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:47:10,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 439 transitions. [2018-11-23 12:47:10,026 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 439 transitions. [2018-11-23 12:47:10,590 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:10,594 INFO L225 Difference]: With dead ends: 300 [2018-11-23 12:47:10,594 INFO L226 Difference]: Without dead ends: 173 [2018-11-23 12:47:10,595 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:47:10,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2018-11-23 12:47:10,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 172. [2018-11-23 12:47:10,737 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:10,737 INFO L82 GeneralOperation]: Start isEquivalent. First operand 173 states. Second operand 172 states. [2018-11-23 12:47:10,738 INFO L74 IsIncluded]: Start isIncluded. First operand 173 states. Second operand 172 states. [2018-11-23 12:47:10,738 INFO L87 Difference]: Start difference. First operand 173 states. Second operand 172 states. [2018-11-23 12:47:10,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,744 INFO L93 Difference]: Finished difference Result 173 states and 258 transitions. [2018-11-23 12:47:10,744 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 258 transitions. [2018-11-23 12:47:10,744 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:10,745 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:10,745 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 173 states. [2018-11-23 12:47:10,745 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 173 states. [2018-11-23 12:47:10,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:10,751 INFO L93 Difference]: Finished difference Result 173 states and 258 transitions. [2018-11-23 12:47:10,752 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 258 transitions. [2018-11-23 12:47:10,752 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:10,752 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:10,752 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:10,753 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:10,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:10,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 257 transitions. [2018-11-23 12:47:10,759 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 257 transitions. Word has length 55 [2018-11-23 12:47:10,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:10,759 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 257 transitions. [2018-11-23 12:47:10,759 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:47:10,759 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 257 transitions. [2018-11-23 12:47:10,761 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:47:10,761 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:10,761 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:10,761 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:10,762 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:10,762 INFO L82 PathProgramCache]: Analyzing trace with hash 1814299397, now seen corresponding path program 1 times [2018-11-23 12:47:10,762 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:10,762 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:10,763 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:10,763 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:10,764 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:10,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:11,031 INFO L256 TraceCheckUtils]: 0: Hoare triple {2886#true} call ULTIMATE.init(); {2886#true} is VALID [2018-11-23 12:47:11,032 INFO L273 TraceCheckUtils]: 1: Hoare triple {2886#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {2886#true} is VALID [2018-11-23 12:47:11,033 INFO L273 TraceCheckUtils]: 2: Hoare triple {2886#true} assume true; {2886#true} is VALID [2018-11-23 12:47:11,033 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2886#true} {2886#true} #632#return; {2886#true} is VALID [2018-11-23 12:47:11,033 INFO L256 TraceCheckUtils]: 4: Hoare triple {2886#true} call #t~ret138 := main(); {2886#true} is VALID [2018-11-23 12:47:11,034 INFO L273 TraceCheckUtils]: 5: Hoare triple {2886#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {2886#true} is VALID [2018-11-23 12:47:11,034 INFO L256 TraceCheckUtils]: 6: Hoare triple {2886#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {2886#true} is VALID [2018-11-23 12:47:11,036 INFO L273 TraceCheckUtils]: 7: Hoare triple {2886#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,037 INFO L273 TraceCheckUtils]: 8: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,038 INFO L273 TraceCheckUtils]: 9: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,039 INFO L273 TraceCheckUtils]: 10: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,040 INFO L273 TraceCheckUtils]: 11: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,041 INFO L273 TraceCheckUtils]: 12: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,042 INFO L273 TraceCheckUtils]: 13: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,042 INFO L273 TraceCheckUtils]: 14: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,043 INFO L273 TraceCheckUtils]: 15: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,044 INFO L273 TraceCheckUtils]: 16: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,044 INFO L273 TraceCheckUtils]: 17: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,045 INFO L273 TraceCheckUtils]: 18: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,046 INFO L273 TraceCheckUtils]: 19: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:11,047 INFO L273 TraceCheckUtils]: 20: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2889#(= |ssl3_accept_#t~mem30| 8464)} is VALID [2018-11-23 12:47:11,048 INFO L273 TraceCheckUtils]: 21: Hoare triple {2889#(= |ssl3_accept_#t~mem30| 8464)} assume 8481 == #t~mem30;havoc #t~mem30; {2887#false} is VALID [2018-11-23 12:47:11,048 INFO L273 TraceCheckUtils]: 22: Hoare triple {2887#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {2887#false} is VALID [2018-11-23 12:47:11,048 INFO L273 TraceCheckUtils]: 23: Hoare triple {2887#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,049 INFO L273 TraceCheckUtils]: 24: Hoare triple {2887#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,049 INFO L273 TraceCheckUtils]: 25: Hoare triple {2887#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {2887#false} is VALID [2018-11-23 12:47:11,049 INFO L273 TraceCheckUtils]: 26: Hoare triple {2887#false} ~skip~0 := 0; {2887#false} is VALID [2018-11-23 12:47:11,050 INFO L273 TraceCheckUtils]: 27: Hoare triple {2887#false} assume !false; {2887#false} is VALID [2018-11-23 12:47:11,050 INFO L273 TraceCheckUtils]: 28: Hoare triple {2887#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,050 INFO L273 TraceCheckUtils]: 29: Hoare triple {2887#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,051 INFO L273 TraceCheckUtils]: 30: Hoare triple {2887#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,051 INFO L273 TraceCheckUtils]: 31: Hoare triple {2887#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,051 INFO L273 TraceCheckUtils]: 32: Hoare triple {2887#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,052 INFO L273 TraceCheckUtils]: 33: Hoare triple {2887#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,052 INFO L273 TraceCheckUtils]: 34: Hoare triple {2887#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,052 INFO L273 TraceCheckUtils]: 35: Hoare triple {2887#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,052 INFO L273 TraceCheckUtils]: 36: Hoare triple {2887#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,053 INFO L273 TraceCheckUtils]: 37: Hoare triple {2887#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,053 INFO L273 TraceCheckUtils]: 38: Hoare triple {2887#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,053 INFO L273 TraceCheckUtils]: 39: Hoare triple {2887#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,053 INFO L273 TraceCheckUtils]: 40: Hoare triple {2887#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,054 INFO L273 TraceCheckUtils]: 41: Hoare triple {2887#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,054 INFO L273 TraceCheckUtils]: 42: Hoare triple {2887#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,054 INFO L273 TraceCheckUtils]: 43: Hoare triple {2887#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,055 INFO L273 TraceCheckUtils]: 44: Hoare triple {2887#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,055 INFO L273 TraceCheckUtils]: 45: Hoare triple {2887#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,055 INFO L273 TraceCheckUtils]: 46: Hoare triple {2887#false} assume 8544 == #t~mem41;havoc #t~mem41; {2887#false} is VALID [2018-11-23 12:47:11,055 INFO L273 TraceCheckUtils]: 47: Hoare triple {2887#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,056 INFO L273 TraceCheckUtils]: 48: Hoare triple {2887#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,056 INFO L273 TraceCheckUtils]: 49: Hoare triple {2887#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {2887#false} is VALID [2018-11-23 12:47:11,056 INFO L273 TraceCheckUtils]: 50: Hoare triple {2887#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {2887#false} is VALID [2018-11-23 12:47:11,056 INFO L273 TraceCheckUtils]: 51: Hoare triple {2887#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {2887#false} is VALID [2018-11-23 12:47:11,057 INFO L273 TraceCheckUtils]: 52: Hoare triple {2887#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {2887#false} is VALID [2018-11-23 12:47:11,057 INFO L273 TraceCheckUtils]: 53: Hoare triple {2887#false} assume 8 == ~blastFlag~0; {2887#false} is VALID [2018-11-23 12:47:11,057 INFO L273 TraceCheckUtils]: 54: Hoare triple {2887#false} assume !false; {2887#false} is VALID [2018-11-23 12:47:11,061 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:11,062 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:11,062 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:11,062 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:11,063 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:11,063 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:11,127 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:11,128 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:11,128 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:11,128 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:11,129 INFO L87 Difference]: Start difference. First operand 172 states and 257 transitions. Second operand 4 states. [2018-11-23 12:47:12,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:12,236 INFO L93 Difference]: Finished difference Result 333 states and 497 transitions. [2018-11-23 12:47:12,236 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:12,237 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:12,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:12,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:12,242 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:47:12,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:12,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:47:12,249 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 443 transitions. [2018-11-23 12:47:12,814 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 443 edges. 443 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:12,819 INFO L225 Difference]: With dead ends: 333 [2018-11-23 12:47:12,819 INFO L226 Difference]: Without dead ends: 186 [2018-11-23 12:47:12,820 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:12,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2018-11-23 12:47:13,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 172. [2018-11-23 12:47:13,292 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:13,292 INFO L82 GeneralOperation]: Start isEquivalent. First operand 186 states. Second operand 172 states. [2018-11-23 12:47:13,292 INFO L74 IsIncluded]: Start isIncluded. First operand 186 states. Second operand 172 states. [2018-11-23 12:47:13,293 INFO L87 Difference]: Start difference. First operand 186 states. Second operand 172 states. [2018-11-23 12:47:13,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:13,310 INFO L93 Difference]: Finished difference Result 186 states and 273 transitions. [2018-11-23 12:47:13,311 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 273 transitions. [2018-11-23 12:47:13,311 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:13,312 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:13,313 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 186 states. [2018-11-23 12:47:13,313 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 186 states. [2018-11-23 12:47:13,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:13,330 INFO L93 Difference]: Finished difference Result 186 states and 273 transitions. [2018-11-23 12:47:13,330 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 273 transitions. [2018-11-23 12:47:13,331 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:13,331 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:13,331 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:13,331 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:13,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:13,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 256 transitions. [2018-11-23 12:47:13,338 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 256 transitions. Word has length 55 [2018-11-23 12:47:13,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:13,338 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 256 transitions. [2018-11-23 12:47:13,338 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:13,339 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 256 transitions. [2018-11-23 12:47:13,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:47:13,340 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:13,340 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:13,341 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:13,341 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:13,341 INFO L82 PathProgramCache]: Analyzing trace with hash 170767942, now seen corresponding path program 1 times [2018-11-23 12:47:13,342 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:13,342 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:13,343 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:13,343 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:13,344 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:13,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:13,531 INFO L256 TraceCheckUtils]: 0: Hoare triple {3866#true} call ULTIMATE.init(); {3866#true} is VALID [2018-11-23 12:47:13,531 INFO L273 TraceCheckUtils]: 1: Hoare triple {3866#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {3866#true} is VALID [2018-11-23 12:47:13,532 INFO L273 TraceCheckUtils]: 2: Hoare triple {3866#true} assume true; {3866#true} is VALID [2018-11-23 12:47:13,532 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3866#true} {3866#true} #632#return; {3866#true} is VALID [2018-11-23 12:47:13,532 INFO L256 TraceCheckUtils]: 4: Hoare triple {3866#true} call #t~ret138 := main(); {3866#true} is VALID [2018-11-23 12:47:13,533 INFO L273 TraceCheckUtils]: 5: Hoare triple {3866#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {3866#true} is VALID [2018-11-23 12:47:13,533 INFO L256 TraceCheckUtils]: 6: Hoare triple {3866#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3866#true} is VALID [2018-11-23 12:47:13,536 INFO L273 TraceCheckUtils]: 7: Hoare triple {3866#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,537 INFO L273 TraceCheckUtils]: 8: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,541 INFO L273 TraceCheckUtils]: 9: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,542 INFO L273 TraceCheckUtils]: 10: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,551 INFO L273 TraceCheckUtils]: 11: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,552 INFO L273 TraceCheckUtils]: 12: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,553 INFO L273 TraceCheckUtils]: 13: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,554 INFO L273 TraceCheckUtils]: 14: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,554 INFO L273 TraceCheckUtils]: 15: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,555 INFO L273 TraceCheckUtils]: 16: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,556 INFO L273 TraceCheckUtils]: 17: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,558 INFO L273 TraceCheckUtils]: 18: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,559 INFO L273 TraceCheckUtils]: 19: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,560 INFO L273 TraceCheckUtils]: 20: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:13,561 INFO L273 TraceCheckUtils]: 21: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3869#(= |ssl3_accept_#t~mem31| 8464)} is VALID [2018-11-23 12:47:13,563 INFO L273 TraceCheckUtils]: 22: Hoare triple {3869#(= |ssl3_accept_#t~mem31| 8464)} assume 8482 == #t~mem31;havoc #t~mem31; {3867#false} is VALID [2018-11-23 12:47:13,563 INFO L273 TraceCheckUtils]: 23: Hoare triple {3867#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,563 INFO L273 TraceCheckUtils]: 24: Hoare triple {3867#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,563 INFO L273 TraceCheckUtils]: 25: Hoare triple {3867#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {3867#false} is VALID [2018-11-23 12:47:13,564 INFO L273 TraceCheckUtils]: 26: Hoare triple {3867#false} ~skip~0 := 0; {3867#false} is VALID [2018-11-23 12:47:13,564 INFO L273 TraceCheckUtils]: 27: Hoare triple {3867#false} assume !false; {3867#false} is VALID [2018-11-23 12:47:13,565 INFO L273 TraceCheckUtils]: 28: Hoare triple {3867#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,565 INFO L273 TraceCheckUtils]: 29: Hoare triple {3867#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,566 INFO L273 TraceCheckUtils]: 30: Hoare triple {3867#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,566 INFO L273 TraceCheckUtils]: 31: Hoare triple {3867#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,566 INFO L273 TraceCheckUtils]: 32: Hoare triple {3867#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,566 INFO L273 TraceCheckUtils]: 33: Hoare triple {3867#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,567 INFO L273 TraceCheckUtils]: 34: Hoare triple {3867#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,567 INFO L273 TraceCheckUtils]: 35: Hoare triple {3867#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,567 INFO L273 TraceCheckUtils]: 36: Hoare triple {3867#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,567 INFO L273 TraceCheckUtils]: 37: Hoare triple {3867#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,567 INFO L273 TraceCheckUtils]: 38: Hoare triple {3867#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,568 INFO L273 TraceCheckUtils]: 39: Hoare triple {3867#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,568 INFO L273 TraceCheckUtils]: 40: Hoare triple {3867#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,568 INFO L273 TraceCheckUtils]: 41: Hoare triple {3867#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,568 INFO L273 TraceCheckUtils]: 42: Hoare triple {3867#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,568 INFO L273 TraceCheckUtils]: 43: Hoare triple {3867#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,569 INFO L273 TraceCheckUtils]: 44: Hoare triple {3867#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,569 INFO L273 TraceCheckUtils]: 45: Hoare triple {3867#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,569 INFO L273 TraceCheckUtils]: 46: Hoare triple {3867#false} assume 8544 == #t~mem41;havoc #t~mem41; {3867#false} is VALID [2018-11-23 12:47:13,569 INFO L273 TraceCheckUtils]: 47: Hoare triple {3867#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,570 INFO L273 TraceCheckUtils]: 48: Hoare triple {3867#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,570 INFO L273 TraceCheckUtils]: 49: Hoare triple {3867#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {3867#false} is VALID [2018-11-23 12:47:13,570 INFO L273 TraceCheckUtils]: 50: Hoare triple {3867#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {3867#false} is VALID [2018-11-23 12:47:13,570 INFO L273 TraceCheckUtils]: 51: Hoare triple {3867#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {3867#false} is VALID [2018-11-23 12:47:13,571 INFO L273 TraceCheckUtils]: 52: Hoare triple {3867#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {3867#false} is VALID [2018-11-23 12:47:13,571 INFO L273 TraceCheckUtils]: 53: Hoare triple {3867#false} assume 8 == ~blastFlag~0; {3867#false} is VALID [2018-11-23 12:47:13,571 INFO L273 TraceCheckUtils]: 54: Hoare triple {3867#false} assume !false; {3867#false} is VALID [2018-11-23 12:47:13,578 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:13,579 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:13,579 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:13,579 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:13,579 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:13,580 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:13,663 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:13,663 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:13,664 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:13,664 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:13,664 INFO L87 Difference]: Start difference. First operand 172 states and 256 transitions. Second operand 4 states. [2018-11-23 12:47:15,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:15,245 INFO L93 Difference]: Finished difference Result 332 states and 495 transitions. [2018-11-23 12:47:15,245 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:15,245 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:15,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:15,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:15,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 441 transitions. [2018-11-23 12:47:15,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:15,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 441 transitions. [2018-11-23 12:47:15,252 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 441 transitions. [2018-11-23 12:47:16,122 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 441 edges. 441 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:16,126 INFO L225 Difference]: With dead ends: 332 [2018-11-23 12:47:16,126 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 12:47:16,127 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:16,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 12:47:16,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 12:47:16,180 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:16,180 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:16,180 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:16,180 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:16,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:16,185 INFO L93 Difference]: Finished difference Result 185 states and 271 transitions. [2018-11-23 12:47:16,185 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 271 transitions. [2018-11-23 12:47:16,185 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:16,185 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:16,185 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:16,186 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:16,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:16,190 INFO L93 Difference]: Finished difference Result 185 states and 271 transitions. [2018-11-23 12:47:16,190 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 271 transitions. [2018-11-23 12:47:16,191 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:16,191 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:16,191 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:16,191 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:16,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:16,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 255 transitions. [2018-11-23 12:47:16,195 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 255 transitions. Word has length 55 [2018-11-23 12:47:16,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:16,195 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 255 transitions. [2018-11-23 12:47:16,195 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:16,196 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 255 transitions. [2018-11-23 12:47:16,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 12:47:16,196 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:16,197 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:16,197 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:16,197 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:16,197 INFO L82 PathProgramCache]: Analyzing trace with hash -1692923025, now seen corresponding path program 1 times [2018-11-23 12:47:16,197 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:16,198 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:16,199 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:16,199 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:16,199 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:16,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:16,869 INFO L256 TraceCheckUtils]: 0: Hoare triple {4842#true} call ULTIMATE.init(); {4842#true} is VALID [2018-11-23 12:47:16,870 INFO L273 TraceCheckUtils]: 1: Hoare triple {4842#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {4842#true} is VALID [2018-11-23 12:47:16,870 INFO L273 TraceCheckUtils]: 2: Hoare triple {4842#true} assume true; {4842#true} is VALID [2018-11-23 12:47:16,870 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4842#true} {4842#true} #632#return; {4842#true} is VALID [2018-11-23 12:47:16,871 INFO L256 TraceCheckUtils]: 4: Hoare triple {4842#true} call #t~ret138 := main(); {4842#true} is VALID [2018-11-23 12:47:16,871 INFO L273 TraceCheckUtils]: 5: Hoare triple {4842#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {4842#true} is VALID [2018-11-23 12:47:16,871 INFO L256 TraceCheckUtils]: 6: Hoare triple {4842#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {4842#true} is VALID [2018-11-23 12:47:16,873 INFO L273 TraceCheckUtils]: 7: Hoare triple {4842#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,874 INFO L273 TraceCheckUtils]: 8: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,875 INFO L273 TraceCheckUtils]: 9: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,875 INFO L273 TraceCheckUtils]: 10: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,876 INFO L273 TraceCheckUtils]: 11: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,876 INFO L273 TraceCheckUtils]: 12: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,877 INFO L273 TraceCheckUtils]: 13: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,878 INFO L273 TraceCheckUtils]: 14: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:16,878 INFO L273 TraceCheckUtils]: 15: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4845#(= |ssl3_accept_#t~mem25| 8464)} is VALID [2018-11-23 12:47:16,879 INFO L273 TraceCheckUtils]: 16: Hoare triple {4845#(= |ssl3_accept_#t~mem25| 8464)} assume 16384 == #t~mem25;havoc #t~mem25; {4843#false} is VALID [2018-11-23 12:47:16,879 INFO L273 TraceCheckUtils]: 17: Hoare triple {4843#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,880 INFO L273 TraceCheckUtils]: 18: Hoare triple {4843#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {4843#false} is VALID [2018-11-23 12:47:16,880 INFO L273 TraceCheckUtils]: 19: Hoare triple {4843#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,881 INFO L273 TraceCheckUtils]: 20: Hoare triple {4843#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,881 INFO L273 TraceCheckUtils]: 21: Hoare triple {4843#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {4843#false} is VALID [2018-11-23 12:47:16,881 INFO L273 TraceCheckUtils]: 22: Hoare triple {4843#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,882 INFO L273 TraceCheckUtils]: 23: Hoare triple {4843#false} assume 12292 != #t~mem62;havoc #t~mem62; {4843#false} is VALID [2018-11-23 12:47:16,882 INFO L273 TraceCheckUtils]: 24: Hoare triple {4843#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {4843#false} is VALID [2018-11-23 12:47:16,882 INFO L273 TraceCheckUtils]: 25: Hoare triple {4843#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,882 INFO L273 TraceCheckUtils]: 26: Hoare triple {4843#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {4843#false} is VALID [2018-11-23 12:47:16,883 INFO L273 TraceCheckUtils]: 27: Hoare triple {4843#false} ~skip~0 := 0; {4843#false} is VALID [2018-11-23 12:47:16,883 INFO L273 TraceCheckUtils]: 28: Hoare triple {4843#false} assume !false; {4843#false} is VALID [2018-11-23 12:47:16,883 INFO L273 TraceCheckUtils]: 29: Hoare triple {4843#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,883 INFO L273 TraceCheckUtils]: 30: Hoare triple {4843#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,883 INFO L273 TraceCheckUtils]: 31: Hoare triple {4843#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,883 INFO L273 TraceCheckUtils]: 32: Hoare triple {4843#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,884 INFO L273 TraceCheckUtils]: 33: Hoare triple {4843#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,884 INFO L273 TraceCheckUtils]: 34: Hoare triple {4843#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,884 INFO L273 TraceCheckUtils]: 35: Hoare triple {4843#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,884 INFO L273 TraceCheckUtils]: 36: Hoare triple {4843#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,884 INFO L273 TraceCheckUtils]: 37: Hoare triple {4843#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,884 INFO L273 TraceCheckUtils]: 38: Hoare triple {4843#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,885 INFO L273 TraceCheckUtils]: 39: Hoare triple {4843#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,885 INFO L273 TraceCheckUtils]: 40: Hoare triple {4843#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,885 INFO L273 TraceCheckUtils]: 41: Hoare triple {4843#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,885 INFO L273 TraceCheckUtils]: 42: Hoare triple {4843#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,885 INFO L273 TraceCheckUtils]: 43: Hoare triple {4843#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,886 INFO L273 TraceCheckUtils]: 44: Hoare triple {4843#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,886 INFO L273 TraceCheckUtils]: 45: Hoare triple {4843#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,886 INFO L273 TraceCheckUtils]: 46: Hoare triple {4843#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,886 INFO L273 TraceCheckUtils]: 47: Hoare triple {4843#false} assume 8544 == #t~mem41;havoc #t~mem41; {4843#false} is VALID [2018-11-23 12:47:16,887 INFO L273 TraceCheckUtils]: 48: Hoare triple {4843#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,887 INFO L273 TraceCheckUtils]: 49: Hoare triple {4843#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,887 INFO L273 TraceCheckUtils]: 50: Hoare triple {4843#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {4843#false} is VALID [2018-11-23 12:47:16,887 INFO L273 TraceCheckUtils]: 51: Hoare triple {4843#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {4843#false} is VALID [2018-11-23 12:47:16,887 INFO L273 TraceCheckUtils]: 52: Hoare triple {4843#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {4843#false} is VALID [2018-11-23 12:47:16,888 INFO L273 TraceCheckUtils]: 53: Hoare triple {4843#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {4843#false} is VALID [2018-11-23 12:47:16,888 INFO L273 TraceCheckUtils]: 54: Hoare triple {4843#false} assume 8 == ~blastFlag~0; {4843#false} is VALID [2018-11-23 12:47:16,888 INFO L273 TraceCheckUtils]: 55: Hoare triple {4843#false} assume !false; {4843#false} is VALID [2018-11-23 12:47:16,891 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:16,891 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:16,891 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:16,892 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-23 12:47:16,892 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:16,892 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:16,953 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:16,954 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:16,954 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:16,954 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:16,955 INFO L87 Difference]: Start difference. First operand 172 states and 255 transitions. Second operand 4 states. [2018-11-23 12:47:18,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:18,324 INFO L93 Difference]: Finished difference Result 332 states and 494 transitions. [2018-11-23 12:47:18,324 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:18,325 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-23 12:47:18,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:18,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:18,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 440 transitions. [2018-11-23 12:47:18,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:18,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 440 transitions. [2018-11-23 12:47:18,332 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 440 transitions. [2018-11-23 12:47:19,146 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 440 edges. 440 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:19,151 INFO L225 Difference]: With dead ends: 332 [2018-11-23 12:47:19,151 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 12:47:19,152 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:19,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 12:47:19,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 12:47:19,241 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:19,241 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:19,241 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:19,241 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:19,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:19,246 INFO L93 Difference]: Finished difference Result 185 states and 270 transitions. [2018-11-23 12:47:19,246 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 270 transitions. [2018-11-23 12:47:19,247 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:19,247 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:19,247 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:19,247 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:19,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:19,252 INFO L93 Difference]: Finished difference Result 185 states and 270 transitions. [2018-11-23 12:47:19,252 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 270 transitions. [2018-11-23 12:47:19,253 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:19,253 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:19,253 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:19,253 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:19,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:19,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 254 transitions. [2018-11-23 12:47:19,257 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 254 transitions. Word has length 56 [2018-11-23 12:47:19,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:19,257 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 254 transitions. [2018-11-23 12:47:19,258 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:19,258 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 254 transitions. [2018-11-23 12:47:19,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 12:47:19,259 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:19,259 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:19,259 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:19,259 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:19,259 INFO L82 PathProgramCache]: Analyzing trace with hash -1847214462, now seen corresponding path program 1 times [2018-11-23 12:47:19,259 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:19,260 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:19,261 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:19,261 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:19,261 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:19,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:19,916 WARN L180 SmtUtils]: Spent 101.00 ms on a formula simplification. DAG size of input: 6 DAG size of output: 3 [2018-11-23 12:47:20,042 INFO L256 TraceCheckUtils]: 0: Hoare triple {5818#true} call ULTIMATE.init(); {5818#true} is VALID [2018-11-23 12:47:20,043 INFO L273 TraceCheckUtils]: 1: Hoare triple {5818#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {5818#true} is VALID [2018-11-23 12:47:20,043 INFO L273 TraceCheckUtils]: 2: Hoare triple {5818#true} assume true; {5818#true} is VALID [2018-11-23 12:47:20,043 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5818#true} {5818#true} #632#return; {5818#true} is VALID [2018-11-23 12:47:20,044 INFO L256 TraceCheckUtils]: 4: Hoare triple {5818#true} call #t~ret138 := main(); {5818#true} is VALID [2018-11-23 12:47:20,044 INFO L273 TraceCheckUtils]: 5: Hoare triple {5818#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {5818#true} is VALID [2018-11-23 12:47:20,044 INFO L256 TraceCheckUtils]: 6: Hoare triple {5818#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {5818#true} is VALID [2018-11-23 12:47:20,057 INFO L273 TraceCheckUtils]: 7: Hoare triple {5818#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,070 INFO L273 TraceCheckUtils]: 8: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,084 INFO L273 TraceCheckUtils]: 9: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,093 INFO L273 TraceCheckUtils]: 10: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,106 INFO L273 TraceCheckUtils]: 11: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,118 INFO L273 TraceCheckUtils]: 12: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,131 INFO L273 TraceCheckUtils]: 13: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,144 INFO L273 TraceCheckUtils]: 14: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,157 INFO L273 TraceCheckUtils]: 15: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:20,169 INFO L273 TraceCheckUtils]: 16: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5821#(= |ssl3_accept_#t~mem26| 8464)} is VALID [2018-11-23 12:47:20,182 INFO L273 TraceCheckUtils]: 17: Hoare triple {5821#(= |ssl3_accept_#t~mem26| 8464)} assume 8192 == #t~mem26;havoc #t~mem26; {5819#false} is VALID [2018-11-23 12:47:20,183 INFO L273 TraceCheckUtils]: 18: Hoare triple {5819#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,183 INFO L273 TraceCheckUtils]: 19: Hoare triple {5819#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {5819#false} is VALID [2018-11-23 12:47:20,183 INFO L273 TraceCheckUtils]: 20: Hoare triple {5819#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,183 INFO L273 TraceCheckUtils]: 21: Hoare triple {5819#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,183 INFO L273 TraceCheckUtils]: 22: Hoare triple {5819#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {5819#false} is VALID [2018-11-23 12:47:20,184 INFO L273 TraceCheckUtils]: 23: Hoare triple {5819#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,184 INFO L273 TraceCheckUtils]: 24: Hoare triple {5819#false} assume 12292 != #t~mem62;havoc #t~mem62; {5819#false} is VALID [2018-11-23 12:47:20,184 INFO L273 TraceCheckUtils]: 25: Hoare triple {5819#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {5819#false} is VALID [2018-11-23 12:47:20,184 INFO L273 TraceCheckUtils]: 26: Hoare triple {5819#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,184 INFO L273 TraceCheckUtils]: 27: Hoare triple {5819#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {5819#false} is VALID [2018-11-23 12:47:20,185 INFO L273 TraceCheckUtils]: 28: Hoare triple {5819#false} ~skip~0 := 0; {5819#false} is VALID [2018-11-23 12:47:20,185 INFO L273 TraceCheckUtils]: 29: Hoare triple {5819#false} assume !false; {5819#false} is VALID [2018-11-23 12:47:20,185 INFO L273 TraceCheckUtils]: 30: Hoare triple {5819#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,185 INFO L273 TraceCheckUtils]: 31: Hoare triple {5819#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,186 INFO L273 TraceCheckUtils]: 32: Hoare triple {5819#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,186 INFO L273 TraceCheckUtils]: 33: Hoare triple {5819#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,186 INFO L273 TraceCheckUtils]: 34: Hoare triple {5819#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,186 INFO L273 TraceCheckUtils]: 35: Hoare triple {5819#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,186 INFO L273 TraceCheckUtils]: 36: Hoare triple {5819#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,192 INFO L273 TraceCheckUtils]: 37: Hoare triple {5819#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,192 INFO L273 TraceCheckUtils]: 38: Hoare triple {5819#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,192 INFO L273 TraceCheckUtils]: 39: Hoare triple {5819#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,193 INFO L273 TraceCheckUtils]: 40: Hoare triple {5819#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,193 INFO L273 TraceCheckUtils]: 41: Hoare triple {5819#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,193 INFO L273 TraceCheckUtils]: 42: Hoare triple {5819#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,193 INFO L273 TraceCheckUtils]: 43: Hoare triple {5819#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,193 INFO L273 TraceCheckUtils]: 44: Hoare triple {5819#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,194 INFO L273 TraceCheckUtils]: 45: Hoare triple {5819#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,194 INFO L273 TraceCheckUtils]: 46: Hoare triple {5819#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,194 INFO L273 TraceCheckUtils]: 47: Hoare triple {5819#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,194 INFO L273 TraceCheckUtils]: 48: Hoare triple {5819#false} assume 8544 == #t~mem41;havoc #t~mem41; {5819#false} is VALID [2018-11-23 12:47:20,194 INFO L273 TraceCheckUtils]: 49: Hoare triple {5819#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,199 INFO L273 TraceCheckUtils]: 50: Hoare triple {5819#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,199 INFO L273 TraceCheckUtils]: 51: Hoare triple {5819#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {5819#false} is VALID [2018-11-23 12:47:20,199 INFO L273 TraceCheckUtils]: 52: Hoare triple {5819#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {5819#false} is VALID [2018-11-23 12:47:20,200 INFO L273 TraceCheckUtils]: 53: Hoare triple {5819#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {5819#false} is VALID [2018-11-23 12:47:20,200 INFO L273 TraceCheckUtils]: 54: Hoare triple {5819#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {5819#false} is VALID [2018-11-23 12:47:20,200 INFO L273 TraceCheckUtils]: 55: Hoare triple {5819#false} assume 8 == ~blastFlag~0; {5819#false} is VALID [2018-11-23 12:47:20,200 INFO L273 TraceCheckUtils]: 56: Hoare triple {5819#false} assume !false; {5819#false} is VALID [2018-11-23 12:47:20,211 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:20,211 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:20,211 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:20,211 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-23 12:47:20,212 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:20,212 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:20,338 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:20,338 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:20,339 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:20,339 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:20,339 INFO L87 Difference]: Start difference. First operand 172 states and 254 transitions. Second operand 4 states. [2018-11-23 12:47:22,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:22,361 INFO L93 Difference]: Finished difference Result 332 states and 493 transitions. [2018-11-23 12:47:22,361 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:22,362 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-23 12:47:22,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:22,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:22,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 439 transitions. [2018-11-23 12:47:22,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:22,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 439 transitions. [2018-11-23 12:47:22,369 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 439 transitions. [2018-11-23 12:47:23,001 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:23,004 INFO L225 Difference]: With dead ends: 332 [2018-11-23 12:47:23,005 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 12:47:23,005 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:23,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 12:47:23,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 12:47:23,134 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:23,134 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:23,134 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:23,134 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:23,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:23,138 INFO L93 Difference]: Finished difference Result 185 states and 269 transitions. [2018-11-23 12:47:23,138 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 269 transitions. [2018-11-23 12:47:23,138 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:23,138 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:23,139 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:23,139 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:23,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:23,142 INFO L93 Difference]: Finished difference Result 185 states and 269 transitions. [2018-11-23 12:47:23,143 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 269 transitions. [2018-11-23 12:47:23,143 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:23,143 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:23,143 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:23,143 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:23,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:23,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 253 transitions. [2018-11-23 12:47:23,146 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 253 transitions. Word has length 57 [2018-11-23 12:47:23,146 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:23,147 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 253 transitions. [2018-11-23 12:47:23,147 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:23,147 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 253 transitions. [2018-11-23 12:47:23,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 12:47:23,147 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:23,148 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:23,148 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:23,148 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:23,148 INFO L82 PathProgramCache]: Analyzing trace with hash -1649145975, now seen corresponding path program 1 times [2018-11-23 12:47:23,148 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:23,148 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:23,150 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:23,150 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:23,150 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:23,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:23,304 INFO L256 TraceCheckUtils]: 0: Hoare triple {6794#true} call ULTIMATE.init(); {6794#true} is VALID [2018-11-23 12:47:23,305 INFO L273 TraceCheckUtils]: 1: Hoare triple {6794#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,305 INFO L273 TraceCheckUtils]: 2: Hoare triple {6794#true} assume true; {6794#true} is VALID [2018-11-23 12:47:23,305 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6794#true} {6794#true} #632#return; {6794#true} is VALID [2018-11-23 12:47:23,305 INFO L256 TraceCheckUtils]: 4: Hoare triple {6794#true} call #t~ret138 := main(); {6794#true} is VALID [2018-11-23 12:47:23,306 INFO L273 TraceCheckUtils]: 5: Hoare triple {6794#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,306 INFO L256 TraceCheckUtils]: 6: Hoare triple {6794#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6794#true} is VALID [2018-11-23 12:47:23,306 INFO L273 TraceCheckUtils]: 7: Hoare triple {6794#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,306 INFO L273 TraceCheckUtils]: 8: Hoare triple {6794#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6794#true} is VALID [2018-11-23 12:47:23,307 INFO L273 TraceCheckUtils]: 9: Hoare triple {6794#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {6794#true} is VALID [2018-11-23 12:47:23,307 INFO L273 TraceCheckUtils]: 10: Hoare triple {6794#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {6794#true} is VALID [2018-11-23 12:47:23,307 INFO L273 TraceCheckUtils]: 11: Hoare triple {6794#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,307 INFO L273 TraceCheckUtils]: 12: Hoare triple {6794#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {6794#true} is VALID [2018-11-23 12:47:23,307 INFO L273 TraceCheckUtils]: 13: Hoare triple {6794#true} assume !false; {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 14: Hoare triple {6794#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 15: Hoare triple {6794#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 16: Hoare triple {6794#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 17: Hoare triple {6794#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 18: Hoare triple {6794#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 19: Hoare triple {6794#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,308 INFO L273 TraceCheckUtils]: 20: Hoare triple {6794#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,309 INFO L273 TraceCheckUtils]: 21: Hoare triple {6794#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,309 INFO L273 TraceCheckUtils]: 22: Hoare triple {6794#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:23,309 INFO L273 TraceCheckUtils]: 23: Hoare triple {6794#true} assume 8464 == #t~mem32;havoc #t~mem32; {6794#true} is VALID [2018-11-23 12:47:23,309 INFO L273 TraceCheckUtils]: 24: Hoare triple {6794#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {6794#true} is VALID [2018-11-23 12:47:23,310 INFO L273 TraceCheckUtils]: 25: Hoare triple {6794#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {6794#true} is VALID [2018-11-23 12:47:23,311 INFO L273 TraceCheckUtils]: 26: Hoare triple {6794#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,312 INFO L273 TraceCheckUtils]: 27: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,312 INFO L273 TraceCheckUtils]: 28: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,314 INFO L273 TraceCheckUtils]: 29: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,314 INFO L273 TraceCheckUtils]: 30: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,316 INFO L273 TraceCheckUtils]: 31: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,334 INFO L273 TraceCheckUtils]: 32: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,343 INFO L273 TraceCheckUtils]: 33: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,356 INFO L273 TraceCheckUtils]: 34: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,357 INFO L273 TraceCheckUtils]: 35: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,358 INFO L273 TraceCheckUtils]: 36: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,358 INFO L273 TraceCheckUtils]: 37: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,360 INFO L273 TraceCheckUtils]: 38: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,360 INFO L273 TraceCheckUtils]: 39: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,362 INFO L273 TraceCheckUtils]: 40: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,362 INFO L273 TraceCheckUtils]: 41: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:23,363 INFO L273 TraceCheckUtils]: 42: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {6797#(= 8496 |ssl3_accept_#t~mem35|)} is VALID [2018-11-23 12:47:23,364 INFO L273 TraceCheckUtils]: 43: Hoare triple {6797#(= 8496 |ssl3_accept_#t~mem35|)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 44: Hoare triple {6795#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 45: Hoare triple {6795#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 46: Hoare triple {6795#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 47: Hoare triple {6795#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 48: Hoare triple {6795#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 49: Hoare triple {6795#false} assume 8544 == #t~mem41;havoc #t~mem41; {6795#false} is VALID [2018-11-23 12:47:23,365 INFO L273 TraceCheckUtils]: 50: Hoare triple {6795#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 51: Hoare triple {6795#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 52: Hoare triple {6795#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 53: Hoare triple {6795#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 54: Hoare triple {6795#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 55: Hoare triple {6795#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 56: Hoare triple {6795#false} assume 8 == ~blastFlag~0; {6795#false} is VALID [2018-11-23 12:47:23,366 INFO L273 TraceCheckUtils]: 57: Hoare triple {6795#false} assume !false; {6795#false} is VALID [2018-11-23 12:47:23,371 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:23,371 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:23,371 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:23,371 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:23,372 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:23,372 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:23,455 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:23,455 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:23,456 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:23,456 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:23,456 INFO L87 Difference]: Start difference. First operand 172 states and 253 transitions. Second operand 4 states. [2018-11-23 12:47:24,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:24,609 INFO L93 Difference]: Finished difference Result 361 states and 539 transitions. [2018-11-23 12:47:24,609 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:24,609 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:24,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:24,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:24,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 472 transitions. [2018-11-23 12:47:24,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:24,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 472 transitions. [2018-11-23 12:47:24,615 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 472 transitions. [2018-11-23 12:47:25,730 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 472 edges. 472 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:25,735 INFO L225 Difference]: With dead ends: 361 [2018-11-23 12:47:25,735 INFO L226 Difference]: Without dead ends: 214 [2018-11-23 12:47:25,736 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:25,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2018-11-23 12:47:25,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 194. [2018-11-23 12:47:25,860 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:25,860 INFO L82 GeneralOperation]: Start isEquivalent. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:25,860 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:25,860 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:25,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:25,865 INFO L93 Difference]: Finished difference Result 214 states and 315 transitions. [2018-11-23 12:47:25,865 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 315 transitions. [2018-11-23 12:47:25,866 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:25,866 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:25,866 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:25,866 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:25,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:25,871 INFO L93 Difference]: Finished difference Result 214 states and 315 transitions. [2018-11-23 12:47:25,871 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 315 transitions. [2018-11-23 12:47:25,872 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:25,872 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:25,872 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:25,872 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:25,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:25,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 290 transitions. [2018-11-23 12:47:25,877 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 290 transitions. Word has length 58 [2018-11-23 12:47:25,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:25,877 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 290 transitions. [2018-11-23 12:47:25,877 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:25,877 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 290 transitions. [2018-11-23 12:47:25,878 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 12:47:25,878 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:25,878 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:25,878 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:25,878 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:25,879 INFO L82 PathProgramCache]: Analyzing trace with hash 677650986, now seen corresponding path program 1 times [2018-11-23 12:47:25,879 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:25,879 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:25,880 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:25,880 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:25,880 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:25,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:26,161 INFO L256 TraceCheckUtils]: 0: Hoare triple {7886#true} call ULTIMATE.init(); {7886#true} is VALID [2018-11-23 12:47:26,161 INFO L273 TraceCheckUtils]: 1: Hoare triple {7886#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {7886#true} is VALID [2018-11-23 12:47:26,161 INFO L273 TraceCheckUtils]: 2: Hoare triple {7886#true} assume true; {7886#true} is VALID [2018-11-23 12:47:26,161 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7886#true} {7886#true} #632#return; {7886#true} is VALID [2018-11-23 12:47:26,162 INFO L256 TraceCheckUtils]: 4: Hoare triple {7886#true} call #t~ret138 := main(); {7886#true} is VALID [2018-11-23 12:47:26,162 INFO L273 TraceCheckUtils]: 5: Hoare triple {7886#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {7886#true} is VALID [2018-11-23 12:47:26,162 INFO L256 TraceCheckUtils]: 6: Hoare triple {7886#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7886#true} is VALID [2018-11-23 12:47:26,164 INFO L273 TraceCheckUtils]: 7: Hoare triple {7886#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,165 INFO L273 TraceCheckUtils]: 8: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,166 INFO L273 TraceCheckUtils]: 9: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,166 INFO L273 TraceCheckUtils]: 10: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,168 INFO L273 TraceCheckUtils]: 11: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,168 INFO L273 TraceCheckUtils]: 12: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,169 INFO L273 TraceCheckUtils]: 13: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,170 INFO L273 TraceCheckUtils]: 14: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,170 INFO L273 TraceCheckUtils]: 15: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,172 INFO L273 TraceCheckUtils]: 16: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:26,173 INFO L273 TraceCheckUtils]: 17: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7889#(= |ssl3_accept_#t~mem27| 8464)} is VALID [2018-11-23 12:47:26,174 INFO L273 TraceCheckUtils]: 18: Hoare triple {7889#(= |ssl3_accept_#t~mem27| 8464)} assume 24576 == #t~mem27;havoc #t~mem27; {7887#false} is VALID [2018-11-23 12:47:26,174 INFO L273 TraceCheckUtils]: 19: Hoare triple {7887#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,174 INFO L273 TraceCheckUtils]: 20: Hoare triple {7887#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {7887#false} is VALID [2018-11-23 12:47:26,175 INFO L273 TraceCheckUtils]: 21: Hoare triple {7887#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,175 INFO L273 TraceCheckUtils]: 22: Hoare triple {7887#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,175 INFO L273 TraceCheckUtils]: 23: Hoare triple {7887#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {7887#false} is VALID [2018-11-23 12:47:26,175 INFO L273 TraceCheckUtils]: 24: Hoare triple {7887#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 25: Hoare triple {7887#false} assume 12292 != #t~mem62;havoc #t~mem62; {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 26: Hoare triple {7887#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 27: Hoare triple {7887#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 28: Hoare triple {7887#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 29: Hoare triple {7887#false} ~skip~0 := 0; {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 30: Hoare triple {7887#false} assume !false; {7887#false} is VALID [2018-11-23 12:47:26,176 INFO L273 TraceCheckUtils]: 31: Hoare triple {7887#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 32: Hoare triple {7887#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 33: Hoare triple {7887#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 34: Hoare triple {7887#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 35: Hoare triple {7887#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 36: Hoare triple {7887#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 37: Hoare triple {7887#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 38: Hoare triple {7887#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,177 INFO L273 TraceCheckUtils]: 39: Hoare triple {7887#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 40: Hoare triple {7887#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 41: Hoare triple {7887#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 42: Hoare triple {7887#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 43: Hoare triple {7887#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 44: Hoare triple {7887#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 45: Hoare triple {7887#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,178 INFO L273 TraceCheckUtils]: 46: Hoare triple {7887#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 47: Hoare triple {7887#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 48: Hoare triple {7887#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 49: Hoare triple {7887#false} assume 8544 == #t~mem41;havoc #t~mem41; {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 50: Hoare triple {7887#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 51: Hoare triple {7887#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 52: Hoare triple {7887#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {7887#false} is VALID [2018-11-23 12:47:26,179 INFO L273 TraceCheckUtils]: 53: Hoare triple {7887#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {7887#false} is VALID [2018-11-23 12:47:26,180 INFO L273 TraceCheckUtils]: 54: Hoare triple {7887#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {7887#false} is VALID [2018-11-23 12:47:26,180 INFO L273 TraceCheckUtils]: 55: Hoare triple {7887#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {7887#false} is VALID [2018-11-23 12:47:26,180 INFO L273 TraceCheckUtils]: 56: Hoare triple {7887#false} assume 8 == ~blastFlag~0; {7887#false} is VALID [2018-11-23 12:47:26,180 INFO L273 TraceCheckUtils]: 57: Hoare triple {7887#false} assume !false; {7887#false} is VALID [2018-11-23 12:47:26,184 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:26,184 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:26,184 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:26,184 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:26,185 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:26,185 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:26,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:26,387 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:26,388 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:26,388 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:26,388 INFO L87 Difference]: Start difference. First operand 194 states and 290 transitions. Second operand 4 states. [2018-11-23 12:47:27,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:27,344 INFO L93 Difference]: Finished difference Result 376 states and 566 transitions. [2018-11-23 12:47:27,344 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:27,344 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:27,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:27,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:27,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 438 transitions. [2018-11-23 12:47:27,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:27,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 438 transitions. [2018-11-23 12:47:27,353 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 438 transitions. [2018-11-23 12:47:27,763 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 438 edges. 438 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:27,768 INFO L225 Difference]: With dead ends: 376 [2018-11-23 12:47:27,768 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 12:47:27,769 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:27,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 12:47:27,872 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 194. [2018-11-23 12:47:27,872 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:27,872 INFO L82 GeneralOperation]: Start isEquivalent. First operand 207 states. Second operand 194 states. [2018-11-23 12:47:27,873 INFO L74 IsIncluded]: Start isIncluded. First operand 207 states. Second operand 194 states. [2018-11-23 12:47:27,873 INFO L87 Difference]: Start difference. First operand 207 states. Second operand 194 states. [2018-11-23 12:47:27,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:27,877 INFO L93 Difference]: Finished difference Result 207 states and 305 transitions. [2018-11-23 12:47:27,878 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 305 transitions. [2018-11-23 12:47:27,878 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:27,878 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:27,878 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 207 states. [2018-11-23 12:47:27,879 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 207 states. [2018-11-23 12:47:27,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:27,883 INFO L93 Difference]: Finished difference Result 207 states and 305 transitions. [2018-11-23 12:47:27,883 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 305 transitions. [2018-11-23 12:47:27,884 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:27,884 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:27,884 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:27,884 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:27,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:27,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 289 transitions. [2018-11-23 12:47:27,888 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 289 transitions. Word has length 58 [2018-11-23 12:47:27,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:27,889 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 289 transitions. [2018-11-23 12:47:27,889 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:27,889 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 289 transitions. [2018-11-23 12:47:27,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 12:47:27,890 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:27,890 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:27,890 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:27,890 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:27,891 INFO L82 PathProgramCache]: Analyzing trace with hash 357033949, now seen corresponding path program 1 times [2018-11-23 12:47:27,891 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:27,891 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:27,892 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:27,892 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:27,892 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:27,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:28,298 INFO L256 TraceCheckUtils]: 0: Hoare triple {8978#true} call ULTIMATE.init(); {8978#true} is VALID [2018-11-23 12:47:28,299 INFO L273 TraceCheckUtils]: 1: Hoare triple {8978#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {8978#true} is VALID [2018-11-23 12:47:28,299 INFO L273 TraceCheckUtils]: 2: Hoare triple {8978#true} assume true; {8978#true} is VALID [2018-11-23 12:47:28,299 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8978#true} {8978#true} #632#return; {8978#true} is VALID [2018-11-23 12:47:28,300 INFO L256 TraceCheckUtils]: 4: Hoare triple {8978#true} call #t~ret138 := main(); {8978#true} is VALID [2018-11-23 12:47:28,300 INFO L273 TraceCheckUtils]: 5: Hoare triple {8978#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {8978#true} is VALID [2018-11-23 12:47:28,300 INFO L256 TraceCheckUtils]: 6: Hoare triple {8978#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {8978#true} is VALID [2018-11-23 12:47:28,303 INFO L273 TraceCheckUtils]: 7: Hoare triple {8978#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,303 INFO L273 TraceCheckUtils]: 8: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,304 INFO L273 TraceCheckUtils]: 9: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,304 INFO L273 TraceCheckUtils]: 10: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,305 INFO L273 TraceCheckUtils]: 11: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,305 INFO L273 TraceCheckUtils]: 12: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,305 INFO L273 TraceCheckUtils]: 13: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,306 INFO L273 TraceCheckUtils]: 14: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,306 INFO L273 TraceCheckUtils]: 15: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,306 INFO L273 TraceCheckUtils]: 16: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,307 INFO L273 TraceCheckUtils]: 17: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:28,308 INFO L273 TraceCheckUtils]: 18: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8981#(= |ssl3_accept_#t~mem28| 8464)} is VALID [2018-11-23 12:47:28,308 INFO L273 TraceCheckUtils]: 19: Hoare triple {8981#(= |ssl3_accept_#t~mem28| 8464)} assume 8195 == #t~mem28;havoc #t~mem28; {8979#false} is VALID [2018-11-23 12:47:28,309 INFO L273 TraceCheckUtils]: 20: Hoare triple {8979#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,309 INFO L273 TraceCheckUtils]: 21: Hoare triple {8979#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {8979#false} is VALID [2018-11-23 12:47:28,309 INFO L273 TraceCheckUtils]: 22: Hoare triple {8979#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,310 INFO L273 TraceCheckUtils]: 23: Hoare triple {8979#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,310 INFO L273 TraceCheckUtils]: 24: Hoare triple {8979#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {8979#false} is VALID [2018-11-23 12:47:28,311 INFO L273 TraceCheckUtils]: 25: Hoare triple {8979#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,311 INFO L273 TraceCheckUtils]: 26: Hoare triple {8979#false} assume 12292 != #t~mem62;havoc #t~mem62; {8979#false} is VALID [2018-11-23 12:47:28,311 INFO L273 TraceCheckUtils]: 27: Hoare triple {8979#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {8979#false} is VALID [2018-11-23 12:47:28,312 INFO L273 TraceCheckUtils]: 28: Hoare triple {8979#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,312 INFO L273 TraceCheckUtils]: 29: Hoare triple {8979#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {8979#false} is VALID [2018-11-23 12:47:28,312 INFO L273 TraceCheckUtils]: 30: Hoare triple {8979#false} ~skip~0 := 0; {8979#false} is VALID [2018-11-23 12:47:28,312 INFO L273 TraceCheckUtils]: 31: Hoare triple {8979#false} assume !false; {8979#false} is VALID [2018-11-23 12:47:28,312 INFO L273 TraceCheckUtils]: 32: Hoare triple {8979#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,313 INFO L273 TraceCheckUtils]: 33: Hoare triple {8979#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,313 INFO L273 TraceCheckUtils]: 34: Hoare triple {8979#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,313 INFO L273 TraceCheckUtils]: 35: Hoare triple {8979#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,313 INFO L273 TraceCheckUtils]: 36: Hoare triple {8979#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,313 INFO L273 TraceCheckUtils]: 37: Hoare triple {8979#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,313 INFO L273 TraceCheckUtils]: 38: Hoare triple {8979#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,314 INFO L273 TraceCheckUtils]: 39: Hoare triple {8979#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,314 INFO L273 TraceCheckUtils]: 40: Hoare triple {8979#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,314 INFO L273 TraceCheckUtils]: 41: Hoare triple {8979#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,314 INFO L273 TraceCheckUtils]: 42: Hoare triple {8979#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,314 INFO L273 TraceCheckUtils]: 43: Hoare triple {8979#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,315 INFO L273 TraceCheckUtils]: 44: Hoare triple {8979#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,315 INFO L273 TraceCheckUtils]: 45: Hoare triple {8979#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,315 INFO L273 TraceCheckUtils]: 46: Hoare triple {8979#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,315 INFO L273 TraceCheckUtils]: 47: Hoare triple {8979#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,315 INFO L273 TraceCheckUtils]: 48: Hoare triple {8979#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,316 INFO L273 TraceCheckUtils]: 49: Hoare triple {8979#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,316 INFO L273 TraceCheckUtils]: 50: Hoare triple {8979#false} assume 8544 == #t~mem41;havoc #t~mem41; {8979#false} is VALID [2018-11-23 12:47:28,316 INFO L273 TraceCheckUtils]: 51: Hoare triple {8979#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,316 INFO L273 TraceCheckUtils]: 52: Hoare triple {8979#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,316 INFO L273 TraceCheckUtils]: 53: Hoare triple {8979#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {8979#false} is VALID [2018-11-23 12:47:28,316 INFO L273 TraceCheckUtils]: 54: Hoare triple {8979#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {8979#false} is VALID [2018-11-23 12:47:28,317 INFO L273 TraceCheckUtils]: 55: Hoare triple {8979#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {8979#false} is VALID [2018-11-23 12:47:28,317 INFO L273 TraceCheckUtils]: 56: Hoare triple {8979#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {8979#false} is VALID [2018-11-23 12:47:28,317 INFO L273 TraceCheckUtils]: 57: Hoare triple {8979#false} assume 8 == ~blastFlag~0; {8979#false} is VALID [2018-11-23 12:47:28,317 INFO L273 TraceCheckUtils]: 58: Hoare triple {8979#false} assume !false; {8979#false} is VALID [2018-11-23 12:47:28,322 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:28,322 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:28,322 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:28,323 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-23 12:47:28,323 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:28,323 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:28,471 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:28,471 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:28,471 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:28,471 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:28,472 INFO L87 Difference]: Start difference. First operand 194 states and 289 transitions. Second operand 4 states. [2018-11-23 12:47:29,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,492 INFO L93 Difference]: Finished difference Result 366 states and 553 transitions. [2018-11-23 12:47:29,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:29,492 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-23 12:47:29,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:29,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:29,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 425 transitions. [2018-11-23 12:47:29,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:29,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 425 transitions. [2018-11-23 12:47:29,497 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 425 transitions. [2018-11-23 12:47:29,888 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:29,892 INFO L225 Difference]: With dead ends: 366 [2018-11-23 12:47:29,892 INFO L226 Difference]: Without dead ends: 197 [2018-11-23 12:47:29,893 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:29,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2018-11-23 12:47:29,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 194. [2018-11-23 12:47:29,964 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:29,964 INFO L82 GeneralOperation]: Start isEquivalent. First operand 197 states. Second operand 194 states. [2018-11-23 12:47:29,964 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand 194 states. [2018-11-23 12:47:29,965 INFO L87 Difference]: Start difference. First operand 197 states. Second operand 194 states. [2018-11-23 12:47:29,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,968 INFO L93 Difference]: Finished difference Result 197 states and 292 transitions. [2018-11-23 12:47:29,968 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 292 transitions. [2018-11-23 12:47:29,969 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,969 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,969 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 197 states. [2018-11-23 12:47:29,969 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 197 states. [2018-11-23 12:47:29,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,973 INFO L93 Difference]: Finished difference Result 197 states and 292 transitions. [2018-11-23 12:47:29,973 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 292 transitions. [2018-11-23 12:47:29,974 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,974 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,974 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:29,974 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:29,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:29,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 288 transitions. [2018-11-23 12:47:29,978 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 288 transitions. Word has length 59 [2018-11-23 12:47:29,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:29,979 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 288 transitions. [2018-11-23 12:47:29,979 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:29,979 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 288 transitions. [2018-11-23 12:47:29,980 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 12:47:29,980 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:29,980 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:29,980 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:29,980 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:29,980 INFO L82 PathProgramCache]: Analyzing trace with hash -1058138999, now seen corresponding path program 1 times [2018-11-23 12:47:29,981 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:29,981 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:29,982 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,982 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:29,982 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:30,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:30,631 INFO L256 TraceCheckUtils]: 0: Hoare triple {10039#true} call ULTIMATE.init(); {10039#true} is VALID [2018-11-23 12:47:30,632 INFO L273 TraceCheckUtils]: 1: Hoare triple {10039#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,632 INFO L273 TraceCheckUtils]: 2: Hoare triple {10039#true} assume true; {10039#true} is VALID [2018-11-23 12:47:30,632 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10039#true} {10039#true} #632#return; {10039#true} is VALID [2018-11-23 12:47:30,633 INFO L256 TraceCheckUtils]: 4: Hoare triple {10039#true} call #t~ret138 := main(); {10039#true} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 5: Hoare triple {10039#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,633 INFO L256 TraceCheckUtils]: 6: Hoare triple {10039#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10039#true} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 7: Hoare triple {10039#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 8: Hoare triple {10039#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {10039#true} is VALID [2018-11-23 12:47:30,633 INFO L273 TraceCheckUtils]: 9: Hoare triple {10039#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {10039#true} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 10: Hoare triple {10039#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10039#true} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 11: Hoare triple {10039#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 12: Hoare triple {10039#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {10039#true} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 13: Hoare triple {10039#true} assume !false; {10039#true} is VALID [2018-11-23 12:47:30,634 INFO L273 TraceCheckUtils]: 14: Hoare triple {10039#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 15: Hoare triple {10039#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 16: Hoare triple {10039#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 17: Hoare triple {10039#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 18: Hoare triple {10039#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 19: Hoare triple {10039#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,635 INFO L273 TraceCheckUtils]: 20: Hoare triple {10039#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 21: Hoare triple {10039#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 22: Hoare triple {10039#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 23: Hoare triple {10039#true} assume 8464 == #t~mem32;havoc #t~mem32; {10039#true} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 24: Hoare triple {10039#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {10039#true} is VALID [2018-11-23 12:47:30,636 INFO L273 TraceCheckUtils]: 25: Hoare triple {10039#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10039#true} is VALID [2018-11-23 12:47:30,649 INFO L273 TraceCheckUtils]: 26: Hoare triple {10039#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,662 INFO L273 TraceCheckUtils]: 27: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,674 INFO L273 TraceCheckUtils]: 28: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,691 INFO L273 TraceCheckUtils]: 29: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,699 INFO L273 TraceCheckUtils]: 30: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,712 INFO L273 TraceCheckUtils]: 31: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,725 INFO L273 TraceCheckUtils]: 32: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,737 INFO L273 TraceCheckUtils]: 33: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,754 INFO L273 TraceCheckUtils]: 34: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,763 INFO L273 TraceCheckUtils]: 35: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:30,775 INFO L273 TraceCheckUtils]: 36: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10042#(= |ssl3_accept_#t~mem29| 8496)} is VALID [2018-11-23 12:47:30,790 INFO L273 TraceCheckUtils]: 37: Hoare triple {10042#(= |ssl3_accept_#t~mem29| 8496)} assume 8480 == #t~mem29;havoc #t~mem29; {10040#false} is VALID [2018-11-23 12:47:30,790 INFO L273 TraceCheckUtils]: 38: Hoare triple {10040#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {10040#false} is VALID [2018-11-23 12:47:30,790 INFO L273 TraceCheckUtils]: 39: Hoare triple {10040#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,791 INFO L273 TraceCheckUtils]: 40: Hoare triple {10040#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,791 INFO L273 TraceCheckUtils]: 41: Hoare triple {10040#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {10040#false} is VALID [2018-11-23 12:47:30,791 INFO L273 TraceCheckUtils]: 42: Hoare triple {10040#false} ~skip~0 := 0; {10040#false} is VALID [2018-11-23 12:47:30,791 INFO L273 TraceCheckUtils]: 43: Hoare triple {10040#false} assume !false; {10040#false} is VALID [2018-11-23 12:47:30,791 INFO L273 TraceCheckUtils]: 44: Hoare triple {10040#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,791 INFO L273 TraceCheckUtils]: 45: Hoare triple {10040#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,792 INFO L273 TraceCheckUtils]: 46: Hoare triple {10040#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,792 INFO L273 TraceCheckUtils]: 47: Hoare triple {10040#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,792 INFO L273 TraceCheckUtils]: 48: Hoare triple {10040#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,792 INFO L273 TraceCheckUtils]: 49: Hoare triple {10040#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,793 INFO L273 TraceCheckUtils]: 50: Hoare triple {10040#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,793 INFO L273 TraceCheckUtils]: 51: Hoare triple {10040#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,793 INFO L273 TraceCheckUtils]: 52: Hoare triple {10040#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,793 INFO L273 TraceCheckUtils]: 53: Hoare triple {10040#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,793 INFO L273 TraceCheckUtils]: 54: Hoare triple {10040#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,794 INFO L273 TraceCheckUtils]: 55: Hoare triple {10040#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,794 INFO L273 TraceCheckUtils]: 56: Hoare triple {10040#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,794 INFO L273 TraceCheckUtils]: 57: Hoare triple {10040#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,794 INFO L273 TraceCheckUtils]: 58: Hoare triple {10040#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,794 INFO L273 TraceCheckUtils]: 59: Hoare triple {10040#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,795 INFO L273 TraceCheckUtils]: 60: Hoare triple {10040#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,795 INFO L273 TraceCheckUtils]: 61: Hoare triple {10040#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,795 INFO L273 TraceCheckUtils]: 62: Hoare triple {10040#false} assume 8544 == #t~mem41;havoc #t~mem41; {10040#false} is VALID [2018-11-23 12:47:30,795 INFO L273 TraceCheckUtils]: 63: Hoare triple {10040#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,795 INFO L273 TraceCheckUtils]: 64: Hoare triple {10040#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,796 INFO L273 TraceCheckUtils]: 65: Hoare triple {10040#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {10040#false} is VALID [2018-11-23 12:47:30,796 INFO L273 TraceCheckUtils]: 66: Hoare triple {10040#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {10040#false} is VALID [2018-11-23 12:47:30,796 INFO L273 TraceCheckUtils]: 67: Hoare triple {10040#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {10040#false} is VALID [2018-11-23 12:47:30,796 INFO L273 TraceCheckUtils]: 68: Hoare triple {10040#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {10040#false} is VALID [2018-11-23 12:47:30,796 INFO L273 TraceCheckUtils]: 69: Hoare triple {10040#false} assume 8 == ~blastFlag~0; {10040#false} is VALID [2018-11-23 12:47:30,796 INFO L273 TraceCheckUtils]: 70: Hoare triple {10040#false} assume !false; {10040#false} is VALID [2018-11-23 12:47:30,800 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:30,801 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:30,801 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:30,801 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 71 [2018-11-23 12:47:30,801 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:30,802 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:30,995 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:30,995 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:30,995 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:30,995 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:30,995 INFO L87 Difference]: Start difference. First operand 194 states and 288 transitions. Second operand 4 states. [2018-11-23 12:47:32,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:32,586 INFO L93 Difference]: Finished difference Result 383 states and 573 transitions. [2018-11-23 12:47:32,586 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:32,586 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 71 [2018-11-23 12:47:32,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:32,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:32,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-23 12:47:32,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:32,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-23 12:47:32,592 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 471 transitions. [2018-11-23 12:47:33,036 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 471 edges. 471 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:33,041 INFO L225 Difference]: With dead ends: 383 [2018-11-23 12:47:33,041 INFO L226 Difference]: Without dead ends: 214 [2018-11-23 12:47:33,041 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:33,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2018-11-23 12:47:33,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 194. [2018-11-23 12:47:33,103 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:33,103 INFO L82 GeneralOperation]: Start isEquivalent. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:33,103 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:33,104 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:33,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:33,108 INFO L93 Difference]: Finished difference Result 214 states and 312 transitions. [2018-11-23 12:47:33,108 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 312 transitions. [2018-11-23 12:47:33,108 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:33,108 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:33,109 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:33,109 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:33,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:33,112 INFO L93 Difference]: Finished difference Result 214 states and 312 transitions. [2018-11-23 12:47:33,112 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 312 transitions. [2018-11-23 12:47:33,113 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:33,113 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:33,113 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:33,113 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:33,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:33,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 287 transitions. [2018-11-23 12:47:33,117 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 287 transitions. Word has length 71 [2018-11-23 12:47:33,117 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:33,118 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 287 transitions. [2018-11-23 12:47:33,118 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:33,118 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 287 transitions. [2018-11-23 12:47:33,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 12:47:33,119 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:33,119 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:33,119 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:33,119 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:33,119 INFO L82 PathProgramCache]: Analyzing trace with hash 1223576014, now seen corresponding path program 1 times [2018-11-23 12:47:33,119 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:33,120 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:33,121 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:33,121 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:33,121 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:33,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:33,488 INFO L256 TraceCheckUtils]: 0: Hoare triple {11155#true} call ULTIMATE.init(); {11155#true} is VALID [2018-11-23 12:47:33,488 INFO L273 TraceCheckUtils]: 1: Hoare triple {11155#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,488 INFO L273 TraceCheckUtils]: 2: Hoare triple {11155#true} assume true; {11155#true} is VALID [2018-11-23 12:47:33,489 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11155#true} {11155#true} #632#return; {11155#true} is VALID [2018-11-23 12:47:33,489 INFO L256 TraceCheckUtils]: 4: Hoare triple {11155#true} call #t~ret138 := main(); {11155#true} is VALID [2018-11-23 12:47:33,489 INFO L273 TraceCheckUtils]: 5: Hoare triple {11155#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,489 INFO L256 TraceCheckUtils]: 6: Hoare triple {11155#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {11155#true} is VALID [2018-11-23 12:47:33,490 INFO L273 TraceCheckUtils]: 7: Hoare triple {11155#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,490 INFO L273 TraceCheckUtils]: 8: Hoare triple {11155#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {11155#true} is VALID [2018-11-23 12:47:33,490 INFO L273 TraceCheckUtils]: 9: Hoare triple {11155#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {11155#true} is VALID [2018-11-23 12:47:33,490 INFO L273 TraceCheckUtils]: 10: Hoare triple {11155#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 11: Hoare triple {11155#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 12: Hoare triple {11155#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 13: Hoare triple {11155#true} assume !false; {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 14: Hoare triple {11155#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 15: Hoare triple {11155#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 16: Hoare triple {11155#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 17: Hoare triple {11155#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,491 INFO L273 TraceCheckUtils]: 18: Hoare triple {11155#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,492 INFO L273 TraceCheckUtils]: 19: Hoare triple {11155#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,492 INFO L273 TraceCheckUtils]: 20: Hoare triple {11155#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,492 INFO L273 TraceCheckUtils]: 21: Hoare triple {11155#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,492 INFO L273 TraceCheckUtils]: 22: Hoare triple {11155#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:33,492 INFO L273 TraceCheckUtils]: 23: Hoare triple {11155#true} assume 8464 == #t~mem32;havoc #t~mem32; {11155#true} is VALID [2018-11-23 12:47:33,492 INFO L273 TraceCheckUtils]: 24: Hoare triple {11155#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {11155#true} is VALID [2018-11-23 12:47:33,493 INFO L273 TraceCheckUtils]: 25: Hoare triple {11155#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {11155#true} is VALID [2018-11-23 12:47:33,495 INFO L273 TraceCheckUtils]: 26: Hoare triple {11155#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,496 INFO L273 TraceCheckUtils]: 27: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,496 INFO L273 TraceCheckUtils]: 28: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,496 INFO L273 TraceCheckUtils]: 29: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,497 INFO L273 TraceCheckUtils]: 30: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,497 INFO L273 TraceCheckUtils]: 31: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,497 INFO L273 TraceCheckUtils]: 32: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,498 INFO L273 TraceCheckUtils]: 33: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,498 INFO L273 TraceCheckUtils]: 34: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,498 INFO L273 TraceCheckUtils]: 35: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,499 INFO L273 TraceCheckUtils]: 36: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:33,500 INFO L273 TraceCheckUtils]: 37: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11158#(= |ssl3_accept_#t~mem30| 8496)} is VALID [2018-11-23 12:47:33,500 INFO L273 TraceCheckUtils]: 38: Hoare triple {11158#(= |ssl3_accept_#t~mem30| 8496)} assume 8481 == #t~mem30;havoc #t~mem30; {11156#false} is VALID [2018-11-23 12:47:33,500 INFO L273 TraceCheckUtils]: 39: Hoare triple {11156#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {11156#false} is VALID [2018-11-23 12:47:33,501 INFO L273 TraceCheckUtils]: 40: Hoare triple {11156#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,501 INFO L273 TraceCheckUtils]: 41: Hoare triple {11156#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,501 INFO L273 TraceCheckUtils]: 42: Hoare triple {11156#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {11156#false} is VALID [2018-11-23 12:47:33,501 INFO L273 TraceCheckUtils]: 43: Hoare triple {11156#false} ~skip~0 := 0; {11156#false} is VALID [2018-11-23 12:47:33,501 INFO L273 TraceCheckUtils]: 44: Hoare triple {11156#false} assume !false; {11156#false} is VALID [2018-11-23 12:47:33,502 INFO L273 TraceCheckUtils]: 45: Hoare triple {11156#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,502 INFO L273 TraceCheckUtils]: 46: Hoare triple {11156#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,502 INFO L273 TraceCheckUtils]: 47: Hoare triple {11156#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,503 INFO L273 TraceCheckUtils]: 48: Hoare triple {11156#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,503 INFO L273 TraceCheckUtils]: 49: Hoare triple {11156#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,503 INFO L273 TraceCheckUtils]: 50: Hoare triple {11156#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,503 INFO L273 TraceCheckUtils]: 51: Hoare triple {11156#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,504 INFO L273 TraceCheckUtils]: 52: Hoare triple {11156#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,504 INFO L273 TraceCheckUtils]: 53: Hoare triple {11156#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,504 INFO L273 TraceCheckUtils]: 54: Hoare triple {11156#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,504 INFO L273 TraceCheckUtils]: 55: Hoare triple {11156#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,504 INFO L273 TraceCheckUtils]: 56: Hoare triple {11156#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,505 INFO L273 TraceCheckUtils]: 57: Hoare triple {11156#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,505 INFO L273 TraceCheckUtils]: 58: Hoare triple {11156#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,505 INFO L273 TraceCheckUtils]: 59: Hoare triple {11156#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,505 INFO L273 TraceCheckUtils]: 60: Hoare triple {11156#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,505 INFO L273 TraceCheckUtils]: 61: Hoare triple {11156#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,505 INFO L273 TraceCheckUtils]: 62: Hoare triple {11156#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,506 INFO L273 TraceCheckUtils]: 63: Hoare triple {11156#false} assume 8544 == #t~mem41;havoc #t~mem41; {11156#false} is VALID [2018-11-23 12:47:33,506 INFO L273 TraceCheckUtils]: 64: Hoare triple {11156#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,506 INFO L273 TraceCheckUtils]: 65: Hoare triple {11156#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,506 INFO L273 TraceCheckUtils]: 66: Hoare triple {11156#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {11156#false} is VALID [2018-11-23 12:47:33,506 INFO L273 TraceCheckUtils]: 67: Hoare triple {11156#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {11156#false} is VALID [2018-11-23 12:47:33,506 INFO L273 TraceCheckUtils]: 68: Hoare triple {11156#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {11156#false} is VALID [2018-11-23 12:47:33,507 INFO L273 TraceCheckUtils]: 69: Hoare triple {11156#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {11156#false} is VALID [2018-11-23 12:47:33,507 INFO L273 TraceCheckUtils]: 70: Hoare triple {11156#false} assume 8 == ~blastFlag~0; {11156#false} is VALID [2018-11-23 12:47:33,507 INFO L273 TraceCheckUtils]: 71: Hoare triple {11156#false} assume !false; {11156#false} is VALID [2018-11-23 12:47:33,511 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:33,511 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:33,511 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:33,512 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:33,512 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:33,512 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:33,598 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:33,598 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:33,598 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:33,598 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:33,599 INFO L87 Difference]: Start difference. First operand 194 states and 287 transitions. Second operand 4 states. [2018-11-23 12:47:34,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:34,621 INFO L93 Difference]: Finished difference Result 381 states and 569 transitions. [2018-11-23 12:47:34,621 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:34,621 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:34,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:34,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:34,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 468 transitions. [2018-11-23 12:47:34,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:34,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 468 transitions. [2018-11-23 12:47:34,626 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 468 transitions. [2018-11-23 12:47:35,062 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 468 edges. 468 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:35,066 INFO L225 Difference]: With dead ends: 381 [2018-11-23 12:47:35,066 INFO L226 Difference]: Without dead ends: 212 [2018-11-23 12:47:35,067 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:35,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2018-11-23 12:47:35,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 194. [2018-11-23 12:47:35,119 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:35,119 INFO L82 GeneralOperation]: Start isEquivalent. First operand 212 states. Second operand 194 states. [2018-11-23 12:47:35,119 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand 194 states. [2018-11-23 12:47:35,119 INFO L87 Difference]: Start difference. First operand 212 states. Second operand 194 states. [2018-11-23 12:47:35,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:35,125 INFO L93 Difference]: Finished difference Result 212 states and 309 transitions. [2018-11-23 12:47:35,125 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 309 transitions. [2018-11-23 12:47:35,125 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:35,126 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:35,126 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 212 states. [2018-11-23 12:47:35,126 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 212 states. [2018-11-23 12:47:35,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:35,130 INFO L93 Difference]: Finished difference Result 212 states and 309 transitions. [2018-11-23 12:47:35,131 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 309 transitions. [2018-11-23 12:47:35,131 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:35,131 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:35,131 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:35,131 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:35,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:35,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 286 transitions. [2018-11-23 12:47:35,135 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 286 transitions. Word has length 72 [2018-11-23 12:47:35,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:35,136 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 286 transitions. [2018-11-23 12:47:35,136 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:35,136 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 286 transitions. [2018-11-23 12:47:35,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 12:47:35,137 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:35,137 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:35,137 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:35,137 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:35,138 INFO L82 PathProgramCache]: Analyzing trace with hash -419955441, now seen corresponding path program 1 times [2018-11-23 12:47:35,138 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:35,138 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:35,139 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:35,139 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:35,140 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:35,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:35,404 INFO L256 TraceCheckUtils]: 0: Hoare triple {12264#true} call ULTIMATE.init(); {12264#true} is VALID [2018-11-23 12:47:35,404 INFO L273 TraceCheckUtils]: 1: Hoare triple {12264#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,405 INFO L273 TraceCheckUtils]: 2: Hoare triple {12264#true} assume true; {12264#true} is VALID [2018-11-23 12:47:35,405 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12264#true} {12264#true} #632#return; {12264#true} is VALID [2018-11-23 12:47:35,405 INFO L256 TraceCheckUtils]: 4: Hoare triple {12264#true} call #t~ret138 := main(); {12264#true} is VALID [2018-11-23 12:47:35,405 INFO L273 TraceCheckUtils]: 5: Hoare triple {12264#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,405 INFO L256 TraceCheckUtils]: 6: Hoare triple {12264#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {12264#true} is VALID [2018-11-23 12:47:35,406 INFO L273 TraceCheckUtils]: 7: Hoare triple {12264#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,406 INFO L273 TraceCheckUtils]: 8: Hoare triple {12264#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {12264#true} is VALID [2018-11-23 12:47:35,406 INFO L273 TraceCheckUtils]: 9: Hoare triple {12264#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {12264#true} is VALID [2018-11-23 12:47:35,406 INFO L273 TraceCheckUtils]: 10: Hoare triple {12264#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {12264#true} is VALID [2018-11-23 12:47:35,406 INFO L273 TraceCheckUtils]: 11: Hoare triple {12264#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,406 INFO L273 TraceCheckUtils]: 12: Hoare triple {12264#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 13: Hoare triple {12264#true} assume !false; {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 14: Hoare triple {12264#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 15: Hoare triple {12264#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 16: Hoare triple {12264#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 17: Hoare triple {12264#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 18: Hoare triple {12264#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 19: Hoare triple {12264#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,407 INFO L273 TraceCheckUtils]: 20: Hoare triple {12264#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,408 INFO L273 TraceCheckUtils]: 21: Hoare triple {12264#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,408 INFO L273 TraceCheckUtils]: 22: Hoare triple {12264#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:35,408 INFO L273 TraceCheckUtils]: 23: Hoare triple {12264#true} assume 8464 == #t~mem32;havoc #t~mem32; {12264#true} is VALID [2018-11-23 12:47:35,408 INFO L273 TraceCheckUtils]: 24: Hoare triple {12264#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {12264#true} is VALID [2018-11-23 12:47:35,408 INFO L273 TraceCheckUtils]: 25: Hoare triple {12264#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {12264#true} is VALID [2018-11-23 12:47:35,409 INFO L273 TraceCheckUtils]: 26: Hoare triple {12264#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,409 INFO L273 TraceCheckUtils]: 27: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,410 INFO L273 TraceCheckUtils]: 28: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,410 INFO L273 TraceCheckUtils]: 29: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,410 INFO L273 TraceCheckUtils]: 30: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,411 INFO L273 TraceCheckUtils]: 31: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,411 INFO L273 TraceCheckUtils]: 32: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,411 INFO L273 TraceCheckUtils]: 33: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,412 INFO L273 TraceCheckUtils]: 34: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,412 INFO L273 TraceCheckUtils]: 35: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,412 INFO L273 TraceCheckUtils]: 36: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,413 INFO L273 TraceCheckUtils]: 37: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:35,413 INFO L273 TraceCheckUtils]: 38: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12267#(= |ssl3_accept_#t~mem31| 8496)} is VALID [2018-11-23 12:47:35,414 INFO L273 TraceCheckUtils]: 39: Hoare triple {12267#(= |ssl3_accept_#t~mem31| 8496)} assume 8482 == #t~mem31;havoc #t~mem31; {12265#false} is VALID [2018-11-23 12:47:35,414 INFO L273 TraceCheckUtils]: 40: Hoare triple {12265#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,414 INFO L273 TraceCheckUtils]: 41: Hoare triple {12265#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,414 INFO L273 TraceCheckUtils]: 42: Hoare triple {12265#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {12265#false} is VALID [2018-11-23 12:47:35,414 INFO L273 TraceCheckUtils]: 43: Hoare triple {12265#false} ~skip~0 := 0; {12265#false} is VALID [2018-11-23 12:47:35,415 INFO L273 TraceCheckUtils]: 44: Hoare triple {12265#false} assume !false; {12265#false} is VALID [2018-11-23 12:47:35,415 INFO L273 TraceCheckUtils]: 45: Hoare triple {12265#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,415 INFO L273 TraceCheckUtils]: 46: Hoare triple {12265#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,415 INFO L273 TraceCheckUtils]: 47: Hoare triple {12265#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,415 INFO L273 TraceCheckUtils]: 48: Hoare triple {12265#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,416 INFO L273 TraceCheckUtils]: 49: Hoare triple {12265#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,416 INFO L273 TraceCheckUtils]: 50: Hoare triple {12265#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,416 INFO L273 TraceCheckUtils]: 51: Hoare triple {12265#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,416 INFO L273 TraceCheckUtils]: 52: Hoare triple {12265#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,416 INFO L273 TraceCheckUtils]: 53: Hoare triple {12265#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,418 INFO L273 TraceCheckUtils]: 54: Hoare triple {12265#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,418 INFO L273 TraceCheckUtils]: 55: Hoare triple {12265#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,418 INFO L273 TraceCheckUtils]: 56: Hoare triple {12265#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,418 INFO L273 TraceCheckUtils]: 57: Hoare triple {12265#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,419 INFO L273 TraceCheckUtils]: 58: Hoare triple {12265#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,419 INFO L273 TraceCheckUtils]: 59: Hoare triple {12265#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,419 INFO L273 TraceCheckUtils]: 60: Hoare triple {12265#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,419 INFO L273 TraceCheckUtils]: 61: Hoare triple {12265#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,419 INFO L273 TraceCheckUtils]: 62: Hoare triple {12265#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,419 INFO L273 TraceCheckUtils]: 63: Hoare triple {12265#false} assume 8544 == #t~mem41;havoc #t~mem41; {12265#false} is VALID [2018-11-23 12:47:35,420 INFO L273 TraceCheckUtils]: 64: Hoare triple {12265#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,420 INFO L273 TraceCheckUtils]: 65: Hoare triple {12265#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,420 INFO L273 TraceCheckUtils]: 66: Hoare triple {12265#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {12265#false} is VALID [2018-11-23 12:47:35,420 INFO L273 TraceCheckUtils]: 67: Hoare triple {12265#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {12265#false} is VALID [2018-11-23 12:47:35,420 INFO L273 TraceCheckUtils]: 68: Hoare triple {12265#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {12265#false} is VALID [2018-11-23 12:47:35,420 INFO L273 TraceCheckUtils]: 69: Hoare triple {12265#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {12265#false} is VALID [2018-11-23 12:47:35,421 INFO L273 TraceCheckUtils]: 70: Hoare triple {12265#false} assume 8 == ~blastFlag~0; {12265#false} is VALID [2018-11-23 12:47:35,421 INFO L273 TraceCheckUtils]: 71: Hoare triple {12265#false} assume !false; {12265#false} is VALID [2018-11-23 12:47:35,425 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:35,425 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:35,425 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:35,426 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:35,426 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:35,426 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:35,500 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:35,500 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:35,500 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:35,501 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:35,501 INFO L87 Difference]: Start difference. First operand 194 states and 286 transitions. Second operand 4 states. [2018-11-23 12:47:36,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:36,605 INFO L93 Difference]: Finished difference Result 380 states and 566 transitions. [2018-11-23 12:47:36,605 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:36,605 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:36,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:36,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:36,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-23 12:47:36,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:36,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-23 12:47:36,610 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 466 transitions. [2018-11-23 12:47:37,044 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:37,049 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:47:37,049 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:47:37,050 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:37,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:47:37,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:47:37,140 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:37,140 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:37,141 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:37,141 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:37,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:37,147 INFO L93 Difference]: Finished difference Result 211 states and 307 transitions. [2018-11-23 12:47:37,147 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 307 transitions. [2018-11-23 12:47:37,147 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:37,147 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:37,148 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:37,148 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:37,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:37,152 INFO L93 Difference]: Finished difference Result 211 states and 307 transitions. [2018-11-23 12:47:37,152 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 307 transitions. [2018-11-23 12:47:37,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:37,153 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:37,153 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:37,153 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:37,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:37,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 285 transitions. [2018-11-23 12:47:37,158 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 285 transitions. Word has length 72 [2018-11-23 12:47:37,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:37,158 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 285 transitions. [2018-11-23 12:47:37,158 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:37,158 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 285 transitions. [2018-11-23 12:47:37,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 12:47:37,159 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:37,159 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:37,159 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:37,160 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:37,161 INFO L82 PathProgramCache]: Analyzing trace with hash 1469488582, now seen corresponding path program 1 times [2018-11-23 12:47:37,161 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:37,161 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:37,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:37,162 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:37,162 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:37,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:37,463 INFO L256 TraceCheckUtils]: 0: Hoare triple {13369#true} call ULTIMATE.init(); {13369#true} is VALID [2018-11-23 12:47:37,463 INFO L273 TraceCheckUtils]: 1: Hoare triple {13369#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,463 INFO L273 TraceCheckUtils]: 2: Hoare triple {13369#true} assume true; {13369#true} is VALID [2018-11-23 12:47:37,463 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13369#true} {13369#true} #632#return; {13369#true} is VALID [2018-11-23 12:47:37,464 INFO L256 TraceCheckUtils]: 4: Hoare triple {13369#true} call #t~ret138 := main(); {13369#true} is VALID [2018-11-23 12:47:37,464 INFO L273 TraceCheckUtils]: 5: Hoare triple {13369#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,464 INFO L256 TraceCheckUtils]: 6: Hoare triple {13369#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {13369#true} is VALID [2018-11-23 12:47:37,464 INFO L273 TraceCheckUtils]: 7: Hoare triple {13369#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,464 INFO L273 TraceCheckUtils]: 8: Hoare triple {13369#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {13369#true} is VALID [2018-11-23 12:47:37,465 INFO L273 TraceCheckUtils]: 9: Hoare triple {13369#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {13369#true} is VALID [2018-11-23 12:47:37,465 INFO L273 TraceCheckUtils]: 10: Hoare triple {13369#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {13369#true} is VALID [2018-11-23 12:47:37,465 INFO L273 TraceCheckUtils]: 11: Hoare triple {13369#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,465 INFO L273 TraceCheckUtils]: 12: Hoare triple {13369#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {13369#true} is VALID [2018-11-23 12:47:37,466 INFO L273 TraceCheckUtils]: 13: Hoare triple {13369#true} assume !false; {13369#true} is VALID [2018-11-23 12:47:37,466 INFO L273 TraceCheckUtils]: 14: Hoare triple {13369#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,466 INFO L273 TraceCheckUtils]: 15: Hoare triple {13369#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,466 INFO L273 TraceCheckUtils]: 16: Hoare triple {13369#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,466 INFO L273 TraceCheckUtils]: 17: Hoare triple {13369#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,466 INFO L273 TraceCheckUtils]: 18: Hoare triple {13369#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,467 INFO L273 TraceCheckUtils]: 19: Hoare triple {13369#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,467 INFO L273 TraceCheckUtils]: 20: Hoare triple {13369#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,467 INFO L273 TraceCheckUtils]: 21: Hoare triple {13369#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,467 INFO L273 TraceCheckUtils]: 22: Hoare triple {13369#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:37,467 INFO L273 TraceCheckUtils]: 23: Hoare triple {13369#true} assume 8464 == #t~mem32;havoc #t~mem32; {13369#true} is VALID [2018-11-23 12:47:37,468 INFO L273 TraceCheckUtils]: 24: Hoare triple {13369#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {13369#true} is VALID [2018-11-23 12:47:37,468 INFO L273 TraceCheckUtils]: 25: Hoare triple {13369#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {13369#true} is VALID [2018-11-23 12:47:37,484 INFO L273 TraceCheckUtils]: 26: Hoare triple {13369#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:37,493 INFO L273 TraceCheckUtils]: 27: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:37,507 INFO L273 TraceCheckUtils]: 28: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:37,515 INFO L273 TraceCheckUtils]: 29: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:37,531 INFO L273 TraceCheckUtils]: 30: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:37,539 INFO L273 TraceCheckUtils]: 31: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:37,554 INFO L273 TraceCheckUtils]: 32: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13372#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem25| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:37,563 INFO L273 TraceCheckUtils]: 33: Hoare triple {13372#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem25| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem25;havoc #t~mem25; {13370#false} is VALID [2018-11-23 12:47:37,563 INFO L273 TraceCheckUtils]: 34: Hoare triple {13370#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,563 INFO L273 TraceCheckUtils]: 35: Hoare triple {13370#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {13370#false} is VALID [2018-11-23 12:47:37,563 INFO L273 TraceCheckUtils]: 36: Hoare triple {13370#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,564 INFO L273 TraceCheckUtils]: 37: Hoare triple {13370#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,564 INFO L273 TraceCheckUtils]: 38: Hoare triple {13370#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {13370#false} is VALID [2018-11-23 12:47:37,564 INFO L273 TraceCheckUtils]: 39: Hoare triple {13370#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,564 INFO L273 TraceCheckUtils]: 40: Hoare triple {13370#false} assume 12292 != #t~mem62;havoc #t~mem62; {13370#false} is VALID [2018-11-23 12:47:37,564 INFO L273 TraceCheckUtils]: 41: Hoare triple {13370#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {13370#false} is VALID [2018-11-23 12:47:37,564 INFO L273 TraceCheckUtils]: 42: Hoare triple {13370#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,565 INFO L273 TraceCheckUtils]: 43: Hoare triple {13370#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {13370#false} is VALID [2018-11-23 12:47:37,565 INFO L273 TraceCheckUtils]: 44: Hoare triple {13370#false} ~skip~0 := 0; {13370#false} is VALID [2018-11-23 12:47:37,565 INFO L273 TraceCheckUtils]: 45: Hoare triple {13370#false} assume !false; {13370#false} is VALID [2018-11-23 12:47:37,565 INFO L273 TraceCheckUtils]: 46: Hoare triple {13370#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,565 INFO L273 TraceCheckUtils]: 47: Hoare triple {13370#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,565 INFO L273 TraceCheckUtils]: 48: Hoare triple {13370#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,566 INFO L273 TraceCheckUtils]: 49: Hoare triple {13370#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,566 INFO L273 TraceCheckUtils]: 50: Hoare triple {13370#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,566 INFO L273 TraceCheckUtils]: 51: Hoare triple {13370#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,566 INFO L273 TraceCheckUtils]: 52: Hoare triple {13370#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,566 INFO L273 TraceCheckUtils]: 53: Hoare triple {13370#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,566 INFO L273 TraceCheckUtils]: 54: Hoare triple {13370#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,567 INFO L273 TraceCheckUtils]: 55: Hoare triple {13370#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,567 INFO L273 TraceCheckUtils]: 56: Hoare triple {13370#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,567 INFO L273 TraceCheckUtils]: 57: Hoare triple {13370#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,567 INFO L273 TraceCheckUtils]: 58: Hoare triple {13370#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,567 INFO L273 TraceCheckUtils]: 59: Hoare triple {13370#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,567 INFO L273 TraceCheckUtils]: 60: Hoare triple {13370#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,568 INFO L273 TraceCheckUtils]: 61: Hoare triple {13370#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,568 INFO L273 TraceCheckUtils]: 62: Hoare triple {13370#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,568 INFO L273 TraceCheckUtils]: 63: Hoare triple {13370#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,568 INFO L273 TraceCheckUtils]: 64: Hoare triple {13370#false} assume 8544 == #t~mem41;havoc #t~mem41; {13370#false} is VALID [2018-11-23 12:47:37,568 INFO L273 TraceCheckUtils]: 65: Hoare triple {13370#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,568 INFO L273 TraceCheckUtils]: 66: Hoare triple {13370#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,569 INFO L273 TraceCheckUtils]: 67: Hoare triple {13370#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {13370#false} is VALID [2018-11-23 12:47:37,569 INFO L273 TraceCheckUtils]: 68: Hoare triple {13370#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {13370#false} is VALID [2018-11-23 12:47:37,569 INFO L273 TraceCheckUtils]: 69: Hoare triple {13370#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {13370#false} is VALID [2018-11-23 12:47:37,569 INFO L273 TraceCheckUtils]: 70: Hoare triple {13370#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {13370#false} is VALID [2018-11-23 12:47:37,569 INFO L273 TraceCheckUtils]: 71: Hoare triple {13370#false} assume 8 == ~blastFlag~0; {13370#false} is VALID [2018-11-23 12:47:37,569 INFO L273 TraceCheckUtils]: 72: Hoare triple {13370#false} assume !false; {13370#false} is VALID [2018-11-23 12:47:37,574 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:37,574 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:37,574 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:37,574 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 73 [2018-11-23 12:47:37,575 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:37,575 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:37,652 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:37,653 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:37,653 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:37,653 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:37,653 INFO L87 Difference]: Start difference. First operand 194 states and 285 transitions. Second operand 4 states. [2018-11-23 12:47:38,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,480 INFO L93 Difference]: Finished difference Result 380 states and 564 transitions. [2018-11-23 12:47:38,480 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:38,480 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 73 [2018-11-23 12:47:38,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:38,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:38,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:47:38,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:38,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:47:38,484 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 465 transitions. [2018-11-23 12:47:38,933 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:38,937 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:47:38,937 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:47:38,938 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:38,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:47:38,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:47:38,998 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:38,999 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:38,999 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:38,999 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:39,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:39,004 INFO L93 Difference]: Finished difference Result 211 states and 306 transitions. [2018-11-23 12:47:39,004 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 306 transitions. [2018-11-23 12:47:39,005 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:39,005 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:39,005 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:39,005 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:39,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:39,009 INFO L93 Difference]: Finished difference Result 211 states and 306 transitions. [2018-11-23 12:47:39,010 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 306 transitions. [2018-11-23 12:47:39,010 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:39,010 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:39,010 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:39,010 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:39,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:39,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 284 transitions. [2018-11-23 12:47:39,014 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 284 transitions. Word has length 73 [2018-11-23 12:47:39,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:39,015 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 284 transitions. [2018-11-23 12:47:39,015 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:39,015 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 284 transitions. [2018-11-23 12:47:39,016 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 12:47:39,016 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:39,016 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:39,016 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:39,016 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:39,016 INFO L82 PathProgramCache]: Analyzing trace with hash 1698264843, now seen corresponding path program 1 times [2018-11-23 12:47:39,017 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:39,017 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:39,018 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:39,018 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:39,018 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:39,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:39,199 INFO L256 TraceCheckUtils]: 0: Hoare triple {14472#true} call ULTIMATE.init(); {14472#true} is VALID [2018-11-23 12:47:39,199 INFO L273 TraceCheckUtils]: 1: Hoare triple {14472#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,199 INFO L273 TraceCheckUtils]: 2: Hoare triple {14472#true} assume true; {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14472#true} {14472#true} #632#return; {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L256 TraceCheckUtils]: 4: Hoare triple {14472#true} call #t~ret138 := main(); {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L273 TraceCheckUtils]: 5: Hoare triple {14472#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L256 TraceCheckUtils]: 6: Hoare triple {14472#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L273 TraceCheckUtils]: 7: Hoare triple {14472#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L273 TraceCheckUtils]: 8: Hoare triple {14472#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L273 TraceCheckUtils]: 9: Hoare triple {14472#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {14472#true} is VALID [2018-11-23 12:47:39,200 INFO L273 TraceCheckUtils]: 10: Hoare triple {14472#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 11: Hoare triple {14472#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 12: Hoare triple {14472#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 13: Hoare triple {14472#true} assume !false; {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 14: Hoare triple {14472#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 15: Hoare triple {14472#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 16: Hoare triple {14472#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 17: Hoare triple {14472#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 18: Hoare triple {14472#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,201 INFO L273 TraceCheckUtils]: 19: Hoare triple {14472#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,202 INFO L273 TraceCheckUtils]: 20: Hoare triple {14472#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,202 INFO L273 TraceCheckUtils]: 21: Hoare triple {14472#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,202 INFO L273 TraceCheckUtils]: 22: Hoare triple {14472#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:39,202 INFO L273 TraceCheckUtils]: 23: Hoare triple {14472#true} assume 8464 == #t~mem32;havoc #t~mem32; {14472#true} is VALID [2018-11-23 12:47:39,202 INFO L273 TraceCheckUtils]: 24: Hoare triple {14472#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {14472#true} is VALID [2018-11-23 12:47:39,202 INFO L273 TraceCheckUtils]: 25: Hoare triple {14472#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {14472#true} is VALID [2018-11-23 12:47:39,203 INFO L273 TraceCheckUtils]: 26: Hoare triple {14472#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,204 INFO L273 TraceCheckUtils]: 27: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,204 INFO L273 TraceCheckUtils]: 28: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,204 INFO L273 TraceCheckUtils]: 29: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,205 INFO L273 TraceCheckUtils]: 30: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,205 INFO L273 TraceCheckUtils]: 31: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,205 INFO L273 TraceCheckUtils]: 32: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:39,206 INFO L273 TraceCheckUtils]: 33: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14475#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem26| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:39,206 INFO L273 TraceCheckUtils]: 34: Hoare triple {14475#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem26| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8192 == #t~mem26;havoc #t~mem26; {14473#false} is VALID [2018-11-23 12:47:39,206 INFO L273 TraceCheckUtils]: 35: Hoare triple {14473#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,206 INFO L273 TraceCheckUtils]: 36: Hoare triple {14473#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 37: Hoare triple {14473#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 38: Hoare triple {14473#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 39: Hoare triple {14473#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 40: Hoare triple {14473#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 41: Hoare triple {14473#false} assume 12292 != #t~mem62;havoc #t~mem62; {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 42: Hoare triple {14473#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {14473#false} is VALID [2018-11-23 12:47:39,207 INFO L273 TraceCheckUtils]: 43: Hoare triple {14473#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,208 INFO L273 TraceCheckUtils]: 44: Hoare triple {14473#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {14473#false} is VALID [2018-11-23 12:47:39,208 INFO L273 TraceCheckUtils]: 45: Hoare triple {14473#false} ~skip~0 := 0; {14473#false} is VALID [2018-11-23 12:47:39,208 INFO L273 TraceCheckUtils]: 46: Hoare triple {14473#false} assume !false; {14473#false} is VALID [2018-11-23 12:47:39,208 INFO L273 TraceCheckUtils]: 47: Hoare triple {14473#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,208 INFO L273 TraceCheckUtils]: 48: Hoare triple {14473#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,209 INFO L273 TraceCheckUtils]: 49: Hoare triple {14473#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,209 INFO L273 TraceCheckUtils]: 50: Hoare triple {14473#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,209 INFO L273 TraceCheckUtils]: 51: Hoare triple {14473#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,209 INFO L273 TraceCheckUtils]: 52: Hoare triple {14473#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,209 INFO L273 TraceCheckUtils]: 53: Hoare triple {14473#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,210 INFO L273 TraceCheckUtils]: 54: Hoare triple {14473#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,210 INFO L273 TraceCheckUtils]: 55: Hoare triple {14473#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,210 INFO L273 TraceCheckUtils]: 56: Hoare triple {14473#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,210 INFO L273 TraceCheckUtils]: 57: Hoare triple {14473#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,210 INFO L273 TraceCheckUtils]: 58: Hoare triple {14473#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,210 INFO L273 TraceCheckUtils]: 59: Hoare triple {14473#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 60: Hoare triple {14473#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 61: Hoare triple {14473#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 62: Hoare triple {14473#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 63: Hoare triple {14473#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 64: Hoare triple {14473#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 65: Hoare triple {14473#false} assume 8544 == #t~mem41;havoc #t~mem41; {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 66: Hoare triple {14473#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 67: Hoare triple {14473#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,211 INFO L273 TraceCheckUtils]: 68: Hoare triple {14473#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {14473#false} is VALID [2018-11-23 12:47:39,212 INFO L273 TraceCheckUtils]: 69: Hoare triple {14473#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {14473#false} is VALID [2018-11-23 12:47:39,212 INFO L273 TraceCheckUtils]: 70: Hoare triple {14473#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {14473#false} is VALID [2018-11-23 12:47:39,212 INFO L273 TraceCheckUtils]: 71: Hoare triple {14473#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {14473#false} is VALID [2018-11-23 12:47:39,212 INFO L273 TraceCheckUtils]: 72: Hoare triple {14473#false} assume 8 == ~blastFlag~0; {14473#false} is VALID [2018-11-23 12:47:39,212 INFO L273 TraceCheckUtils]: 73: Hoare triple {14473#false} assume !false; {14473#false} is VALID [2018-11-23 12:47:39,216 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:39,216 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:39,216 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:39,216 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-23 12:47:39,216 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:39,217 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:39,292 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:39,292 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:39,293 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:39,293 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:39,293 INFO L87 Difference]: Start difference. First operand 194 states and 284 transitions. Second operand 4 states. [2018-11-23 12:47:40,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:40,148 INFO L93 Difference]: Finished difference Result 380 states and 562 transitions. [2018-11-23 12:47:40,148 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:40,148 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-23 12:47:40,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:40,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:40,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:47:40,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:40,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:47:40,153 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 464 transitions. [2018-11-23 12:47:40,640 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 464 edges. 464 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:40,644 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:47:40,645 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:47:40,645 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:40,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:47:40,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:47:40,711 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:40,711 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:40,712 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:40,712 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:40,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:40,717 INFO L93 Difference]: Finished difference Result 211 states and 305 transitions. [2018-11-23 12:47:40,717 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 305 transitions. [2018-11-23 12:47:40,717 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:40,717 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:40,718 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:40,718 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:40,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:40,722 INFO L93 Difference]: Finished difference Result 211 states and 305 transitions. [2018-11-23 12:47:40,722 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 305 transitions. [2018-11-23 12:47:40,722 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:40,722 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:40,723 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:40,723 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:40,723 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:40,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 283 transitions. [2018-11-23 12:47:40,727 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 283 transitions. Word has length 74 [2018-11-23 12:47:40,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:40,728 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 283 transitions. [2018-11-23 12:47:40,728 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:40,728 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 283 transitions. [2018-11-23 12:47:40,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-23 12:47:40,729 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:40,729 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:40,729 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:40,730 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:40,730 INFO L82 PathProgramCache]: Analyzing trace with hash -1081640255, now seen corresponding path program 1 times [2018-11-23 12:47:40,730 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:40,730 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:40,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:40,731 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:40,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:40,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:40,936 INFO L256 TraceCheckUtils]: 0: Hoare triple {15575#true} call ULTIMATE.init(); {15575#true} is VALID [2018-11-23 12:47:40,936 INFO L273 TraceCheckUtils]: 1: Hoare triple {15575#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,936 INFO L273 TraceCheckUtils]: 2: Hoare triple {15575#true} assume true; {15575#true} is VALID [2018-11-23 12:47:40,937 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15575#true} {15575#true} #632#return; {15575#true} is VALID [2018-11-23 12:47:40,937 INFO L256 TraceCheckUtils]: 4: Hoare triple {15575#true} call #t~ret138 := main(); {15575#true} is VALID [2018-11-23 12:47:40,937 INFO L273 TraceCheckUtils]: 5: Hoare triple {15575#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,937 INFO L256 TraceCheckUtils]: 6: Hoare triple {15575#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {15575#true} is VALID [2018-11-23 12:47:40,938 INFO L273 TraceCheckUtils]: 7: Hoare triple {15575#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,938 INFO L273 TraceCheckUtils]: 8: Hoare triple {15575#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {15575#true} is VALID [2018-11-23 12:47:40,938 INFO L273 TraceCheckUtils]: 9: Hoare triple {15575#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {15575#true} is VALID [2018-11-23 12:47:40,938 INFO L273 TraceCheckUtils]: 10: Hoare triple {15575#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15575#true} is VALID [2018-11-23 12:47:40,939 INFO L273 TraceCheckUtils]: 11: Hoare triple {15575#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,939 INFO L273 TraceCheckUtils]: 12: Hoare triple {15575#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {15575#true} is VALID [2018-11-23 12:47:40,939 INFO L273 TraceCheckUtils]: 13: Hoare triple {15575#true} assume !false; {15575#true} is VALID [2018-11-23 12:47:40,939 INFO L273 TraceCheckUtils]: 14: Hoare triple {15575#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,939 INFO L273 TraceCheckUtils]: 15: Hoare triple {15575#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,939 INFO L273 TraceCheckUtils]: 16: Hoare triple {15575#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 17: Hoare triple {15575#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 18: Hoare triple {15575#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 19: Hoare triple {15575#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 20: Hoare triple {15575#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 21: Hoare triple {15575#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 22: Hoare triple {15575#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:47:40,940 INFO L273 TraceCheckUtils]: 23: Hoare triple {15575#true} assume 8464 == #t~mem32;havoc #t~mem32; {15575#true} is VALID [2018-11-23 12:47:40,941 INFO L273 TraceCheckUtils]: 24: Hoare triple {15575#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {15575#true} is VALID [2018-11-23 12:47:40,941 INFO L273 TraceCheckUtils]: 25: Hoare triple {15575#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15575#true} is VALID [2018-11-23 12:47:40,942 INFO L273 TraceCheckUtils]: 26: Hoare triple {15575#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,942 INFO L273 TraceCheckUtils]: 27: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,943 INFO L273 TraceCheckUtils]: 28: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,943 INFO L273 TraceCheckUtils]: 29: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,943 INFO L273 TraceCheckUtils]: 30: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,944 INFO L273 TraceCheckUtils]: 31: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,944 INFO L273 TraceCheckUtils]: 32: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,945 INFO L273 TraceCheckUtils]: 33: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:40,945 INFO L273 TraceCheckUtils]: 34: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15578#(= |ssl3_accept_#t~mem27| 8496)} is VALID [2018-11-23 12:47:40,946 INFO L273 TraceCheckUtils]: 35: Hoare triple {15578#(= |ssl3_accept_#t~mem27| 8496)} assume 24576 == #t~mem27;havoc #t~mem27; {15576#false} is VALID [2018-11-23 12:47:40,946 INFO L273 TraceCheckUtils]: 36: Hoare triple {15576#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,947 INFO L273 TraceCheckUtils]: 37: Hoare triple {15576#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15576#false} is VALID [2018-11-23 12:47:40,947 INFO L273 TraceCheckUtils]: 38: Hoare triple {15576#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,947 INFO L273 TraceCheckUtils]: 39: Hoare triple {15576#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,947 INFO L273 TraceCheckUtils]: 40: Hoare triple {15576#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {15576#false} is VALID [2018-11-23 12:47:40,947 INFO L273 TraceCheckUtils]: 41: Hoare triple {15576#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,948 INFO L273 TraceCheckUtils]: 42: Hoare triple {15576#false} assume 12292 != #t~mem62;havoc #t~mem62; {15576#false} is VALID [2018-11-23 12:47:40,948 INFO L273 TraceCheckUtils]: 43: Hoare triple {15576#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {15576#false} is VALID [2018-11-23 12:47:40,948 INFO L273 TraceCheckUtils]: 44: Hoare triple {15576#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,948 INFO L273 TraceCheckUtils]: 45: Hoare triple {15576#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {15576#false} is VALID [2018-11-23 12:47:40,949 INFO L273 TraceCheckUtils]: 46: Hoare triple {15576#false} ~skip~0 := 0; {15576#false} is VALID [2018-11-23 12:47:40,949 INFO L273 TraceCheckUtils]: 47: Hoare triple {15576#false} assume !false; {15576#false} is VALID [2018-11-23 12:47:40,949 INFO L273 TraceCheckUtils]: 48: Hoare triple {15576#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,949 INFO L273 TraceCheckUtils]: 49: Hoare triple {15576#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,949 INFO L273 TraceCheckUtils]: 50: Hoare triple {15576#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,949 INFO L273 TraceCheckUtils]: 51: Hoare triple {15576#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 52: Hoare triple {15576#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 53: Hoare triple {15576#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 54: Hoare triple {15576#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 55: Hoare triple {15576#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 56: Hoare triple {15576#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 57: Hoare triple {15576#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,950 INFO L273 TraceCheckUtils]: 58: Hoare triple {15576#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 59: Hoare triple {15576#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 60: Hoare triple {15576#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 61: Hoare triple {15576#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 62: Hoare triple {15576#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 63: Hoare triple {15576#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 64: Hoare triple {15576#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,951 INFO L273 TraceCheckUtils]: 65: Hoare triple {15576#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,952 INFO L273 TraceCheckUtils]: 66: Hoare triple {15576#false} assume 8544 == #t~mem41;havoc #t~mem41; {15576#false} is VALID [2018-11-23 12:47:40,952 INFO L273 TraceCheckUtils]: 67: Hoare triple {15576#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,952 INFO L273 TraceCheckUtils]: 68: Hoare triple {15576#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,952 INFO L273 TraceCheckUtils]: 69: Hoare triple {15576#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {15576#false} is VALID [2018-11-23 12:47:40,952 INFO L273 TraceCheckUtils]: 70: Hoare triple {15576#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {15576#false} is VALID [2018-11-23 12:47:40,953 INFO L273 TraceCheckUtils]: 71: Hoare triple {15576#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {15576#false} is VALID [2018-11-23 12:47:40,953 INFO L273 TraceCheckUtils]: 72: Hoare triple {15576#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {15576#false} is VALID [2018-11-23 12:47:40,953 INFO L273 TraceCheckUtils]: 73: Hoare triple {15576#false} assume 8 == ~blastFlag~0; {15576#false} is VALID [2018-11-23 12:47:40,953 INFO L273 TraceCheckUtils]: 74: Hoare triple {15576#false} assume !false; {15576#false} is VALID [2018-11-23 12:47:40,960 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:40,960 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:40,960 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:40,961 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-23 12:47:40,961 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:40,961 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:41,049 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:41,049 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:41,050 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:41,050 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:41,050 INFO L87 Difference]: Start difference. First operand 194 states and 283 transitions. Second operand 4 states. [2018-11-23 12:47:42,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:42,200 INFO L93 Difference]: Finished difference Result 380 states and 560 transitions. [2018-11-23 12:47:42,200 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:42,200 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-23 12:47:42,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:42,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:42,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:47:42,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:42,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:47:42,204 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 463 transitions. [2018-11-23 12:47:42,662 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:42,666 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:47:42,666 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:47:42,667 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:42,667 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:47:43,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:47:43,051 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:43,051 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:43,052 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:43,052 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:43,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:43,057 INFO L93 Difference]: Finished difference Result 211 states and 304 transitions. [2018-11-23 12:47:43,057 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 304 transitions. [2018-11-23 12:47:43,058 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:43,058 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:43,058 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:43,058 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:43,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:43,062 INFO L93 Difference]: Finished difference Result 211 states and 304 transitions. [2018-11-23 12:47:43,063 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 304 transitions. [2018-11-23 12:47:43,063 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:43,063 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:43,063 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:43,064 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:43,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:43,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 282 transitions. [2018-11-23 12:47:43,068 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 282 transitions. Word has length 75 [2018-11-23 12:47:43,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:43,068 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 282 transitions. [2018-11-23 12:47:43,068 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:43,068 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 282 transitions. [2018-11-23 12:47:43,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2018-11-23 12:47:43,069 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:43,069 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:43,069 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:43,070 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:43,070 INFO L82 PathProgramCache]: Analyzing trace with hash 1653580326, now seen corresponding path program 1 times [2018-11-23 12:47:43,070 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:43,070 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:43,071 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:43,071 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:43,071 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:43,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:43,698 WARN L180 SmtUtils]: Spent 185.00 ms on a formula simplification. DAG size of input: 20 DAG size of output: 17 [2018-11-23 12:47:43,765 INFO L256 TraceCheckUtils]: 0: Hoare triple {16680#true} call ULTIMATE.init(); {16680#true} is VALID [2018-11-23 12:47:43,765 INFO L273 TraceCheckUtils]: 1: Hoare triple {16680#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,765 INFO L273 TraceCheckUtils]: 2: Hoare triple {16680#true} assume true; {16680#true} is VALID [2018-11-23 12:47:43,765 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16680#true} {16680#true} #632#return; {16680#true} is VALID [2018-11-23 12:47:43,766 INFO L256 TraceCheckUtils]: 4: Hoare triple {16680#true} call #t~ret138 := main(); {16680#true} is VALID [2018-11-23 12:47:43,766 INFO L273 TraceCheckUtils]: 5: Hoare triple {16680#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,766 INFO L256 TraceCheckUtils]: 6: Hoare triple {16680#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {16680#true} is VALID [2018-11-23 12:47:43,766 INFO L273 TraceCheckUtils]: 7: Hoare triple {16680#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,766 INFO L273 TraceCheckUtils]: 8: Hoare triple {16680#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 9: Hoare triple {16680#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 10: Hoare triple {16680#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 11: Hoare triple {16680#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 12: Hoare triple {16680#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 13: Hoare triple {16680#true} assume !false; {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 14: Hoare triple {16680#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 15: Hoare triple {16680#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,767 INFO L273 TraceCheckUtils]: 16: Hoare triple {16680#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 17: Hoare triple {16680#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 18: Hoare triple {16680#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 19: Hoare triple {16680#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 20: Hoare triple {16680#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 21: Hoare triple {16680#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 22: Hoare triple {16680#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 23: Hoare triple {16680#true} assume 8464 == #t~mem32;havoc #t~mem32; {16680#true} is VALID [2018-11-23 12:47:43,768 INFO L273 TraceCheckUtils]: 24: Hoare triple {16680#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {16680#true} is VALID [2018-11-23 12:47:43,769 INFO L273 TraceCheckUtils]: 25: Hoare triple {16680#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {16680#true} is VALID [2018-11-23 12:47:43,770 INFO L273 TraceCheckUtils]: 26: Hoare triple {16680#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,770 INFO L273 TraceCheckUtils]: 27: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,770 INFO L273 TraceCheckUtils]: 28: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,771 INFO L273 TraceCheckUtils]: 29: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,771 INFO L273 TraceCheckUtils]: 30: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,771 INFO L273 TraceCheckUtils]: 31: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,771 INFO L273 TraceCheckUtils]: 32: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,772 INFO L273 TraceCheckUtils]: 33: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,772 INFO L273 TraceCheckUtils]: 34: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:43,773 INFO L273 TraceCheckUtils]: 35: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16683#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem28| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:43,774 INFO L273 TraceCheckUtils]: 36: Hoare triple {16683#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem28| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8195 == #t~mem28;havoc #t~mem28; {16681#false} is VALID [2018-11-23 12:47:43,774 INFO L273 TraceCheckUtils]: 37: Hoare triple {16681#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,774 INFO L273 TraceCheckUtils]: 38: Hoare triple {16681#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {16681#false} is VALID [2018-11-23 12:47:43,774 INFO L273 TraceCheckUtils]: 39: Hoare triple {16681#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,775 INFO L273 TraceCheckUtils]: 40: Hoare triple {16681#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,775 INFO L273 TraceCheckUtils]: 41: Hoare triple {16681#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {16681#false} is VALID [2018-11-23 12:47:43,775 INFO L273 TraceCheckUtils]: 42: Hoare triple {16681#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,775 INFO L273 TraceCheckUtils]: 43: Hoare triple {16681#false} assume 12292 != #t~mem62;havoc #t~mem62; {16681#false} is VALID [2018-11-23 12:47:43,775 INFO L273 TraceCheckUtils]: 44: Hoare triple {16681#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {16681#false} is VALID [2018-11-23 12:47:43,776 INFO L273 TraceCheckUtils]: 45: Hoare triple {16681#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,776 INFO L273 TraceCheckUtils]: 46: Hoare triple {16681#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {16681#false} is VALID [2018-11-23 12:47:43,776 INFO L273 TraceCheckUtils]: 47: Hoare triple {16681#false} ~skip~0 := 0; {16681#false} is VALID [2018-11-23 12:47:43,776 INFO L273 TraceCheckUtils]: 48: Hoare triple {16681#false} assume !false; {16681#false} is VALID [2018-11-23 12:47:43,776 INFO L273 TraceCheckUtils]: 49: Hoare triple {16681#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,777 INFO L273 TraceCheckUtils]: 50: Hoare triple {16681#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,777 INFO L273 TraceCheckUtils]: 51: Hoare triple {16681#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,777 INFO L273 TraceCheckUtils]: 52: Hoare triple {16681#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,777 INFO L273 TraceCheckUtils]: 53: Hoare triple {16681#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,777 INFO L273 TraceCheckUtils]: 54: Hoare triple {16681#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,778 INFO L273 TraceCheckUtils]: 55: Hoare triple {16681#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,778 INFO L273 TraceCheckUtils]: 56: Hoare triple {16681#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,778 INFO L273 TraceCheckUtils]: 57: Hoare triple {16681#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,778 INFO L273 TraceCheckUtils]: 58: Hoare triple {16681#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,779 INFO L273 TraceCheckUtils]: 59: Hoare triple {16681#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,779 INFO L273 TraceCheckUtils]: 60: Hoare triple {16681#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,779 INFO L273 TraceCheckUtils]: 61: Hoare triple {16681#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,779 INFO L273 TraceCheckUtils]: 62: Hoare triple {16681#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,779 INFO L273 TraceCheckUtils]: 63: Hoare triple {16681#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,780 INFO L273 TraceCheckUtils]: 64: Hoare triple {16681#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,780 INFO L273 TraceCheckUtils]: 65: Hoare triple {16681#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,780 INFO L273 TraceCheckUtils]: 66: Hoare triple {16681#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,780 INFO L273 TraceCheckUtils]: 67: Hoare triple {16681#false} assume 8544 == #t~mem41;havoc #t~mem41; {16681#false} is VALID [2018-11-23 12:47:43,780 INFO L273 TraceCheckUtils]: 68: Hoare triple {16681#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,780 INFO L273 TraceCheckUtils]: 69: Hoare triple {16681#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,781 INFO L273 TraceCheckUtils]: 70: Hoare triple {16681#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {16681#false} is VALID [2018-11-23 12:47:43,781 INFO L273 TraceCheckUtils]: 71: Hoare triple {16681#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {16681#false} is VALID [2018-11-23 12:47:43,781 INFO L273 TraceCheckUtils]: 72: Hoare triple {16681#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {16681#false} is VALID [2018-11-23 12:47:43,781 INFO L273 TraceCheckUtils]: 73: Hoare triple {16681#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {16681#false} is VALID [2018-11-23 12:47:43,781 INFO L273 TraceCheckUtils]: 74: Hoare triple {16681#false} assume 8 == ~blastFlag~0; {16681#false} is VALID [2018-11-23 12:47:43,781 INFO L273 TraceCheckUtils]: 75: Hoare triple {16681#false} assume !false; {16681#false} is VALID [2018-11-23 12:47:43,787 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:43,788 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:43,788 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:43,788 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-23 12:47:43,789 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:43,789 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:43,881 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:43,882 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:43,882 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:43,882 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:43,882 INFO L87 Difference]: Start difference. First operand 194 states and 282 transitions. Second operand 4 states. [2018-11-23 12:47:44,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,700 INFO L93 Difference]: Finished difference Result 370 states and 546 transitions. [2018-11-23 12:47:44,701 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:44,701 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-23 12:47:44,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:44,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:44,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-23 12:47:44,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:44,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-23 12:47:44,705 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 450 transitions. [2018-11-23 12:47:45,144 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 450 edges. 450 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:45,148 INFO L225 Difference]: With dead ends: 370 [2018-11-23 12:47:45,148 INFO L226 Difference]: Without dead ends: 201 [2018-11-23 12:47:45,149 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:45,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2018-11-23 12:47:45,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 194. [2018-11-23 12:47:45,235 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:45,235 INFO L82 GeneralOperation]: Start isEquivalent. First operand 201 states. Second operand 194 states. [2018-11-23 12:47:45,236 INFO L74 IsIncluded]: Start isIncluded. First operand 201 states. Second operand 194 states. [2018-11-23 12:47:45,236 INFO L87 Difference]: Start difference. First operand 201 states. Second operand 194 states. [2018-11-23 12:47:45,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:45,240 INFO L93 Difference]: Finished difference Result 201 states and 291 transitions. [2018-11-23 12:47:45,240 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 291 transitions. [2018-11-23 12:47:45,240 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:45,240 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:45,241 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 201 states. [2018-11-23 12:47:45,241 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 201 states. [2018-11-23 12:47:45,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:45,244 INFO L93 Difference]: Finished difference Result 201 states and 291 transitions. [2018-11-23 12:47:45,244 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 291 transitions. [2018-11-23 12:47:45,245 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:45,245 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:45,245 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:45,245 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:45,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:45,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 281 transitions. [2018-11-23 12:47:45,249 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 281 transitions. Word has length 76 [2018-11-23 12:47:45,250 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:45,250 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 281 transitions. [2018-11-23 12:47:45,250 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:45,250 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 281 transitions. [2018-11-23 12:47:45,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 12:47:45,251 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:45,251 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:45,251 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:45,251 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:45,252 INFO L82 PathProgramCache]: Analyzing trace with hash -586078850, now seen corresponding path program 1 times [2018-11-23 12:47:45,252 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:45,252 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:45,253 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:45,253 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:45,253 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:45,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:45,402 INFO L256 TraceCheckUtils]: 0: Hoare triple {17752#true} call ULTIMATE.init(); {17752#true} is VALID [2018-11-23 12:47:45,402 INFO L273 TraceCheckUtils]: 1: Hoare triple {17752#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,402 INFO L273 TraceCheckUtils]: 2: Hoare triple {17752#true} assume true; {17752#true} is VALID [2018-11-23 12:47:45,402 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {17752#true} {17752#true} #632#return; {17752#true} is VALID [2018-11-23 12:47:45,402 INFO L256 TraceCheckUtils]: 4: Hoare triple {17752#true} call #t~ret138 := main(); {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L273 TraceCheckUtils]: 5: Hoare triple {17752#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L256 TraceCheckUtils]: 6: Hoare triple {17752#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L273 TraceCheckUtils]: 7: Hoare triple {17752#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L273 TraceCheckUtils]: 8: Hoare triple {17752#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L273 TraceCheckUtils]: 9: Hoare triple {17752#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L273 TraceCheckUtils]: 10: Hoare triple {17752#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {17752#true} is VALID [2018-11-23 12:47:45,403 INFO L273 TraceCheckUtils]: 11: Hoare triple {17752#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 12: Hoare triple {17752#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 13: Hoare triple {17752#true} assume !false; {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 14: Hoare triple {17752#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 15: Hoare triple {17752#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 16: Hoare triple {17752#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 17: Hoare triple {17752#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 18: Hoare triple {17752#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,404 INFO L273 TraceCheckUtils]: 19: Hoare triple {17752#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 20: Hoare triple {17752#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 21: Hoare triple {17752#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 22: Hoare triple {17752#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 23: Hoare triple {17752#true} assume 8464 == #t~mem32;havoc #t~mem32; {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 24: Hoare triple {17752#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 25: Hoare triple {17752#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 26: Hoare triple {17752#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 27: Hoare triple {17752#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,405 INFO L273 TraceCheckUtils]: 28: Hoare triple {17752#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 29: Hoare triple {17752#true} ~skip~0 := 0; {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 30: Hoare triple {17752#true} assume !false; {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 31: Hoare triple {17752#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 32: Hoare triple {17752#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 33: Hoare triple {17752#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 34: Hoare triple {17752#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 35: Hoare triple {17752#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,406 INFO L273 TraceCheckUtils]: 36: Hoare triple {17752#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 37: Hoare triple {17752#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 38: Hoare triple {17752#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 39: Hoare triple {17752#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 40: Hoare triple {17752#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 41: Hoare triple {17752#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 42: Hoare triple {17752#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 43: Hoare triple {17752#true} assume 8496 == #t~mem35;havoc #t~mem35; {17752#true} is VALID [2018-11-23 12:47:45,407 INFO L273 TraceCheckUtils]: 44: Hoare triple {17752#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {17752#true} is VALID [2018-11-23 12:47:45,408 INFO L273 TraceCheckUtils]: 45: Hoare triple {17752#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {17752#true} is VALID [2018-11-23 12:47:45,408 INFO L273 TraceCheckUtils]: 46: Hoare triple {17752#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:47:45,408 INFO L273 TraceCheckUtils]: 47: Hoare triple {17752#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,409 INFO L273 TraceCheckUtils]: 48: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,410 INFO L273 TraceCheckUtils]: 49: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,410 INFO L273 TraceCheckUtils]: 50: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,410 INFO L273 TraceCheckUtils]: 51: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,411 INFO L273 TraceCheckUtils]: 52: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,411 INFO L273 TraceCheckUtils]: 53: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,411 INFO L273 TraceCheckUtils]: 54: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,412 INFO L273 TraceCheckUtils]: 55: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,412 INFO L273 TraceCheckUtils]: 56: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,413 INFO L273 TraceCheckUtils]: 57: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,413 INFO L273 TraceCheckUtils]: 58: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,414 INFO L273 TraceCheckUtils]: 59: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,414 INFO L273 TraceCheckUtils]: 60: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,415 INFO L273 TraceCheckUtils]: 61: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,415 INFO L273 TraceCheckUtils]: 62: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,416 INFO L273 TraceCheckUtils]: 63: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,416 INFO L273 TraceCheckUtils]: 64: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,417 INFO L273 TraceCheckUtils]: 65: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,417 INFO L273 TraceCheckUtils]: 66: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,418 INFO L273 TraceCheckUtils]: 67: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,418 INFO L273 TraceCheckUtils]: 68: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,419 INFO L273 TraceCheckUtils]: 69: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:45,420 INFO L273 TraceCheckUtils]: 70: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {17755#(= 8656 |ssl3_accept_#t~mem41|)} is VALID [2018-11-23 12:47:45,420 INFO L273 TraceCheckUtils]: 71: Hoare triple {17755#(= 8656 |ssl3_accept_#t~mem41|)} assume 8544 == #t~mem41;havoc #t~mem41; {17753#false} is VALID [2018-11-23 12:47:45,421 INFO L273 TraceCheckUtils]: 72: Hoare triple {17753#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {17753#false} is VALID [2018-11-23 12:47:45,421 INFO L273 TraceCheckUtils]: 73: Hoare triple {17753#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {17753#false} is VALID [2018-11-23 12:47:45,421 INFO L273 TraceCheckUtils]: 74: Hoare triple {17753#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {17753#false} is VALID [2018-11-23 12:47:45,421 INFO L273 TraceCheckUtils]: 75: Hoare triple {17753#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {17753#false} is VALID [2018-11-23 12:47:45,421 INFO L273 TraceCheckUtils]: 76: Hoare triple {17753#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {17753#false} is VALID [2018-11-23 12:47:45,421 INFO L273 TraceCheckUtils]: 77: Hoare triple {17753#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {17753#false} is VALID [2018-11-23 12:47:45,422 INFO L273 TraceCheckUtils]: 78: Hoare triple {17753#false} assume 8 == ~blastFlag~0; {17753#false} is VALID [2018-11-23 12:47:45,422 INFO L273 TraceCheckUtils]: 79: Hoare triple {17753#false} assume !false; {17753#false} is VALID [2018-11-23 12:47:45,429 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:45,430 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:45,430 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:45,430 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:47:45,430 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:45,430 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:45,502 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:45,502 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:45,502 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:45,502 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:45,503 INFO L87 Difference]: Start difference. First operand 194 states and 281 transitions. Second operand 4 states. [2018-11-23 12:47:47,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,104 INFO L93 Difference]: Finished difference Result 467 states and 692 transitions. [2018-11-23 12:47:47,105 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:47,105 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:47:47,105 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:47,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:47,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 567 transitions. [2018-11-23 12:47:47,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:47,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 567 transitions. [2018-11-23 12:47:47,110 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 567 transitions. [2018-11-23 12:47:47,662 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 567 edges. 567 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:47,670 INFO L225 Difference]: With dead ends: 467 [2018-11-23 12:47:47,670 INFO L226 Difference]: Without dead ends: 298 [2018-11-23 12:47:47,670 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:47,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2018-11-23 12:47:47,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 224. [2018-11-23 12:47:47,856 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:47,857 INFO L82 GeneralOperation]: Start isEquivalent. First operand 298 states. Second operand 224 states. [2018-11-23 12:47:47,857 INFO L74 IsIncluded]: Start isIncluded. First operand 298 states. Second operand 224 states. [2018-11-23 12:47:47,857 INFO L87 Difference]: Start difference. First operand 298 states. Second operand 224 states. [2018-11-23 12:47:47,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,863 INFO L93 Difference]: Finished difference Result 298 states and 438 transitions. [2018-11-23 12:47:47,864 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 438 transitions. [2018-11-23 12:47:47,864 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:47,864 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:47,864 INFO L74 IsIncluded]: Start isIncluded. First operand 224 states. Second operand 298 states. [2018-11-23 12:47:47,864 INFO L87 Difference]: Start difference. First operand 224 states. Second operand 298 states. [2018-11-23 12:47:47,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,870 INFO L93 Difference]: Finished difference Result 298 states and 438 transitions. [2018-11-23 12:47:47,870 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 438 transitions. [2018-11-23 12:47:47,870 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:47,870 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:47,870 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:47,870 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:47,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 224 states. [2018-11-23 12:47:47,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 332 transitions. [2018-11-23 12:47:47,874 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 332 transitions. Word has length 80 [2018-11-23 12:47:47,875 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:47,875 INFO L480 AbstractCegarLoop]: Abstraction has 224 states and 332 transitions. [2018-11-23 12:47:47,875 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:47,875 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 332 transitions. [2018-11-23 12:47:47,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 12:47:47,876 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:47,876 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:47,876 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:47,876 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:47,876 INFO L82 PathProgramCache]: Analyzing trace with hash -658465408, now seen corresponding path program 1 times [2018-11-23 12:47:47,876 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:47,877 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:47,878 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:47,878 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:47,878 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:47,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:48,081 INFO L256 TraceCheckUtils]: 0: Hoare triple {19168#true} call ULTIMATE.init(); {19168#true} is VALID [2018-11-23 12:47:48,081 INFO L273 TraceCheckUtils]: 1: Hoare triple {19168#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,082 INFO L273 TraceCheckUtils]: 2: Hoare triple {19168#true} assume true; {19168#true} is VALID [2018-11-23 12:47:48,082 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {19168#true} {19168#true} #632#return; {19168#true} is VALID [2018-11-23 12:47:48,082 INFO L256 TraceCheckUtils]: 4: Hoare triple {19168#true} call #t~ret138 := main(); {19168#true} is VALID [2018-11-23 12:47:48,083 INFO L273 TraceCheckUtils]: 5: Hoare triple {19168#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,083 INFO L256 TraceCheckUtils]: 6: Hoare triple {19168#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {19168#true} is VALID [2018-11-23 12:47:48,083 INFO L273 TraceCheckUtils]: 7: Hoare triple {19168#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,083 INFO L273 TraceCheckUtils]: 8: Hoare triple {19168#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 9: Hoare triple {19168#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 10: Hoare triple {19168#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 11: Hoare triple {19168#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 12: Hoare triple {19168#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 13: Hoare triple {19168#true} assume !false; {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 14: Hoare triple {19168#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,084 INFO L273 TraceCheckUtils]: 15: Hoare triple {19168#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 16: Hoare triple {19168#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 17: Hoare triple {19168#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 18: Hoare triple {19168#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 19: Hoare triple {19168#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 20: Hoare triple {19168#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 21: Hoare triple {19168#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 22: Hoare triple {19168#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 23: Hoare triple {19168#true} assume 8464 == #t~mem32;havoc #t~mem32; {19168#true} is VALID [2018-11-23 12:47:48,085 INFO L273 TraceCheckUtils]: 24: Hoare triple {19168#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 25: Hoare triple {19168#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 26: Hoare triple {19168#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 27: Hoare triple {19168#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 28: Hoare triple {19168#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 29: Hoare triple {19168#true} ~skip~0 := 0; {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 30: Hoare triple {19168#true} assume !false; {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 31: Hoare triple {19168#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,086 INFO L273 TraceCheckUtils]: 32: Hoare triple {19168#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 33: Hoare triple {19168#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 34: Hoare triple {19168#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 35: Hoare triple {19168#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 36: Hoare triple {19168#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 37: Hoare triple {19168#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 38: Hoare triple {19168#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 39: Hoare triple {19168#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 40: Hoare triple {19168#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,087 INFO L273 TraceCheckUtils]: 41: Hoare triple {19168#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,088 INFO L273 TraceCheckUtils]: 42: Hoare triple {19168#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,088 INFO L273 TraceCheckUtils]: 43: Hoare triple {19168#true} assume 8496 == #t~mem35;havoc #t~mem35; {19168#true} is VALID [2018-11-23 12:47:48,088 INFO L273 TraceCheckUtils]: 44: Hoare triple {19168#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {19168#true} is VALID [2018-11-23 12:47:48,088 INFO L273 TraceCheckUtils]: 45: Hoare triple {19168#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {19168#true} is VALID [2018-11-23 12:47:48,088 INFO L273 TraceCheckUtils]: 46: Hoare triple {19168#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {19168#true} is VALID [2018-11-23 12:47:48,095 INFO L273 TraceCheckUtils]: 47: Hoare triple {19168#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,096 INFO L273 TraceCheckUtils]: 48: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,096 INFO L273 TraceCheckUtils]: 49: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,096 INFO L273 TraceCheckUtils]: 50: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,097 INFO L273 TraceCheckUtils]: 51: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,097 INFO L273 TraceCheckUtils]: 52: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,097 INFO L273 TraceCheckUtils]: 53: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,098 INFO L273 TraceCheckUtils]: 54: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,098 INFO L273 TraceCheckUtils]: 55: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,098 INFO L273 TraceCheckUtils]: 56: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,099 INFO L273 TraceCheckUtils]: 57: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,099 INFO L273 TraceCheckUtils]: 58: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,099 INFO L273 TraceCheckUtils]: 59: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,099 INFO L273 TraceCheckUtils]: 60: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,100 INFO L273 TraceCheckUtils]: 61: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,100 INFO L273 TraceCheckUtils]: 62: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,101 INFO L273 TraceCheckUtils]: 63: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,101 INFO L273 TraceCheckUtils]: 64: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,102 INFO L273 TraceCheckUtils]: 65: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:48,102 INFO L273 TraceCheckUtils]: 66: Hoare triple {19170#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {19171#(= 8512 |ssl3_accept_#t~mem37|)} is VALID [2018-11-23 12:47:48,103 INFO L273 TraceCheckUtils]: 67: Hoare triple {19171#(= 8512 |ssl3_accept_#t~mem37|)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,103 INFO L273 TraceCheckUtils]: 68: Hoare triple {19169#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,103 INFO L273 TraceCheckUtils]: 69: Hoare triple {19169#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,104 INFO L273 TraceCheckUtils]: 70: Hoare triple {19169#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,104 INFO L273 TraceCheckUtils]: 71: Hoare triple {19169#false} assume 8544 == #t~mem41;havoc #t~mem41; {19169#false} is VALID [2018-11-23 12:47:48,104 INFO L273 TraceCheckUtils]: 72: Hoare triple {19169#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,104 INFO L273 TraceCheckUtils]: 73: Hoare triple {19169#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,104 INFO L273 TraceCheckUtils]: 74: Hoare triple {19169#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {19169#false} is VALID [2018-11-23 12:47:48,105 INFO L273 TraceCheckUtils]: 75: Hoare triple {19169#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {19169#false} is VALID [2018-11-23 12:47:48,105 INFO L273 TraceCheckUtils]: 76: Hoare triple {19169#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {19169#false} is VALID [2018-11-23 12:47:48,105 INFO L273 TraceCheckUtils]: 77: Hoare triple {19169#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {19169#false} is VALID [2018-11-23 12:47:48,105 INFO L273 TraceCheckUtils]: 78: Hoare triple {19169#false} assume 8 == ~blastFlag~0; {19169#false} is VALID [2018-11-23 12:47:48,105 INFO L273 TraceCheckUtils]: 79: Hoare triple {19169#false} assume !false; {19169#false} is VALID [2018-11-23 12:47:48,112 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:48,113 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:48,113 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:48,113 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:47:48,113 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:48,113 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:48,188 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:48,188 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:48,189 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:48,189 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:48,189 INFO L87 Difference]: Start difference. First operand 224 states and 332 transitions. Second operand 4 states. [2018-11-23 12:47:49,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:49,449 INFO L93 Difference]: Finished difference Result 472 states and 710 transitions. [2018-11-23 12:47:49,449 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:49,449 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:47:49,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:49,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:49,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 484 transitions. [2018-11-23 12:47:49,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:49,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 484 transitions. [2018-11-23 12:47:49,455 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 484 transitions. [2018-11-23 12:47:49,955 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 484 edges. 484 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:49,962 INFO L225 Difference]: With dead ends: 472 [2018-11-23 12:47:49,962 INFO L226 Difference]: Without dead ends: 273 [2018-11-23 12:47:49,963 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:49,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2018-11-23 12:47:50,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 248. [2018-11-23 12:47:50,103 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:50,103 INFO L82 GeneralOperation]: Start isEquivalent. First operand 273 states. Second operand 248 states. [2018-11-23 12:47:50,103 INFO L74 IsIncluded]: Start isIncluded. First operand 273 states. Second operand 248 states. [2018-11-23 12:47:50,104 INFO L87 Difference]: Start difference. First operand 273 states. Second operand 248 states. [2018-11-23 12:47:50,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:50,109 INFO L93 Difference]: Finished difference Result 273 states and 405 transitions. [2018-11-23 12:47:50,109 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 405 transitions. [2018-11-23 12:47:50,109 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:50,109 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:50,109 INFO L74 IsIncluded]: Start isIncluded. First operand 248 states. Second operand 273 states. [2018-11-23 12:47:50,110 INFO L87 Difference]: Start difference. First operand 248 states. Second operand 273 states. [2018-11-23 12:47:50,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:50,116 INFO L93 Difference]: Finished difference Result 273 states and 405 transitions. [2018-11-23 12:47:50,116 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 405 transitions. [2018-11-23 12:47:50,117 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:50,117 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:50,117 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:50,117 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:50,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 248 states. [2018-11-23 12:47:50,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 373 transitions. [2018-11-23 12:47:50,123 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 373 transitions. Word has length 80 [2018-11-23 12:47:50,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:50,123 INFO L480 AbstractCegarLoop]: Abstraction has 248 states and 373 transitions. [2018-11-23 12:47:50,123 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:50,123 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 373 transitions. [2018-11-23 12:47:50,124 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:47:50,124 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:50,124 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:50,124 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:50,125 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:50,125 INFO L82 PathProgramCache]: Analyzing trace with hash -407391601, now seen corresponding path program 1 times [2018-11-23 12:47:50,125 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:50,125 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:50,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:50,126 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:50,126 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:50,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:50,354 INFO L256 TraceCheckUtils]: 0: Hoare triple {20556#true} call ULTIMATE.init(); {20556#true} is VALID [2018-11-23 12:47:50,354 INFO L273 TraceCheckUtils]: 1: Hoare triple {20556#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,354 INFO L273 TraceCheckUtils]: 2: Hoare triple {20556#true} assume true; {20556#true} is VALID [2018-11-23 12:47:50,355 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20556#true} {20556#true} #632#return; {20556#true} is VALID [2018-11-23 12:47:50,355 INFO L256 TraceCheckUtils]: 4: Hoare triple {20556#true} call #t~ret138 := main(); {20556#true} is VALID [2018-11-23 12:47:50,355 INFO L273 TraceCheckUtils]: 5: Hoare triple {20556#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,355 INFO L256 TraceCheckUtils]: 6: Hoare triple {20556#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {20556#true} is VALID [2018-11-23 12:47:50,355 INFO L273 TraceCheckUtils]: 7: Hoare triple {20556#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 8: Hoare triple {20556#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 9: Hoare triple {20556#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 10: Hoare triple {20556#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 11: Hoare triple {20556#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 12: Hoare triple {20556#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 13: Hoare triple {20556#true} assume !false; {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 14: Hoare triple {20556#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,356 INFO L273 TraceCheckUtils]: 15: Hoare triple {20556#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 16: Hoare triple {20556#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 17: Hoare triple {20556#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 18: Hoare triple {20556#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 19: Hoare triple {20556#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 20: Hoare triple {20556#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 21: Hoare triple {20556#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 22: Hoare triple {20556#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 23: Hoare triple {20556#true} assume 8464 == #t~mem32;havoc #t~mem32; {20556#true} is VALID [2018-11-23 12:47:50,357 INFO L273 TraceCheckUtils]: 24: Hoare triple {20556#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 25: Hoare triple {20556#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 26: Hoare triple {20556#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 27: Hoare triple {20556#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 28: Hoare triple {20556#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 29: Hoare triple {20556#true} ~skip~0 := 0; {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 30: Hoare triple {20556#true} assume !false; {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 31: Hoare triple {20556#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,358 INFO L273 TraceCheckUtils]: 32: Hoare triple {20556#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 33: Hoare triple {20556#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 34: Hoare triple {20556#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 35: Hoare triple {20556#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 36: Hoare triple {20556#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 37: Hoare triple {20556#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 38: Hoare triple {20556#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 39: Hoare triple {20556#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,359 INFO L273 TraceCheckUtils]: 40: Hoare triple {20556#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,360 INFO L273 TraceCheckUtils]: 41: Hoare triple {20556#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,360 INFO L273 TraceCheckUtils]: 42: Hoare triple {20556#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,360 INFO L273 TraceCheckUtils]: 43: Hoare triple {20556#true} assume 8496 == #t~mem35;havoc #t~mem35; {20556#true} is VALID [2018-11-23 12:47:50,360 INFO L273 TraceCheckUtils]: 44: Hoare triple {20556#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {20556#true} is VALID [2018-11-23 12:47:50,360 INFO L273 TraceCheckUtils]: 45: Hoare triple {20556#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20556#true} is VALID [2018-11-23 12:47:50,360 INFO L273 TraceCheckUtils]: 46: Hoare triple {20556#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {20556#true} is VALID [2018-11-23 12:47:50,361 INFO L273 TraceCheckUtils]: 47: Hoare triple {20556#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,362 INFO L273 TraceCheckUtils]: 48: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,362 INFO L273 TraceCheckUtils]: 49: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,362 INFO L273 TraceCheckUtils]: 50: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,363 INFO L273 TraceCheckUtils]: 51: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,363 INFO L273 TraceCheckUtils]: 52: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,363 INFO L273 TraceCheckUtils]: 53: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,364 INFO L273 TraceCheckUtils]: 54: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,364 INFO L273 TraceCheckUtils]: 55: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,365 INFO L273 TraceCheckUtils]: 56: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,365 INFO L273 TraceCheckUtils]: 57: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,366 INFO L273 TraceCheckUtils]: 58: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,366 INFO L273 TraceCheckUtils]: 59: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,367 INFO L273 TraceCheckUtils]: 60: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,368 INFO L273 TraceCheckUtils]: 61: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,368 INFO L273 TraceCheckUtils]: 62: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,369 INFO L273 TraceCheckUtils]: 63: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,369 INFO L273 TraceCheckUtils]: 64: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,370 INFO L273 TraceCheckUtils]: 65: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,370 INFO L273 TraceCheckUtils]: 66: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,371 INFO L273 TraceCheckUtils]: 67: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,371 INFO L273 TraceCheckUtils]: 68: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 69: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,372 INFO L273 TraceCheckUtils]: 70: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:50,373 INFO L273 TraceCheckUtils]: 71: Hoare triple {20558#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {20559#(= 8656 |ssl3_accept_#t~mem42|)} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 72: Hoare triple {20559#(= 8656 |ssl3_accept_#t~mem42|)} assume 8545 == #t~mem42;havoc #t~mem42; {20557#false} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 73: Hoare triple {20557#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {20557#false} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 74: Hoare triple {20557#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {20557#false} is VALID [2018-11-23 12:47:50,374 INFO L273 TraceCheckUtils]: 75: Hoare triple {20557#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {20557#false} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 76: Hoare triple {20557#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {20557#false} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 77: Hoare triple {20557#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {20557#false} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 78: Hoare triple {20557#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {20557#false} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 79: Hoare triple {20557#false} assume 8 == ~blastFlag~0; {20557#false} is VALID [2018-11-23 12:47:50,375 INFO L273 TraceCheckUtils]: 80: Hoare triple {20557#false} assume !false; {20557#false} is VALID [2018-11-23 12:47:50,383 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:50,383 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:50,384 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:50,384 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:47:50,384 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:50,384 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:50,468 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:50,469 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:50,469 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:50,469 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:50,469 INFO L87 Difference]: Start difference. First operand 248 states and 373 transitions. Second operand 4 states. [2018-11-23 12:47:51,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:51,969 INFO L93 Difference]: Finished difference Result 537 states and 811 transitions. [2018-11-23 12:47:51,969 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:51,969 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:47:51,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:51,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:51,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 553 transitions. [2018-11-23 12:47:51,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:51,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 553 transitions. [2018-11-23 12:47:51,974 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 553 transitions. [2018-11-23 12:47:52,509 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 553 edges. 553 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:52,516 INFO L225 Difference]: With dead ends: 537 [2018-11-23 12:47:52,516 INFO L226 Difference]: Without dead ends: 314 [2018-11-23 12:47:52,517 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:52,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2018-11-23 12:47:52,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 249. [2018-11-23 12:47:52,604 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:52,605 INFO L82 GeneralOperation]: Start isEquivalent. First operand 314 states. Second operand 249 states. [2018-11-23 12:47:52,605 INFO L74 IsIncluded]: Start isIncluded. First operand 314 states. Second operand 249 states. [2018-11-23 12:47:52,605 INFO L87 Difference]: Start difference. First operand 314 states. Second operand 249 states. [2018-11-23 12:47:52,611 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,611 INFO L93 Difference]: Finished difference Result 314 states and 465 transitions. [2018-11-23 12:47:52,611 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 465 transitions. [2018-11-23 12:47:52,612 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:52,612 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:52,612 INFO L74 IsIncluded]: Start isIncluded. First operand 249 states. Second operand 314 states. [2018-11-23 12:47:52,612 INFO L87 Difference]: Start difference. First operand 249 states. Second operand 314 states. [2018-11-23 12:47:52,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,619 INFO L93 Difference]: Finished difference Result 314 states and 465 transitions. [2018-11-23 12:47:52,619 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 465 transitions. [2018-11-23 12:47:52,619 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:52,620 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:52,620 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:52,620 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:52,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 249 states. [2018-11-23 12:47:52,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 374 transitions. [2018-11-23 12:47:52,625 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 374 transitions. Word has length 81 [2018-11-23 12:47:52,625 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:52,625 INFO L480 AbstractCegarLoop]: Abstraction has 249 states and 374 transitions. [2018-11-23 12:47:52,626 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:52,626 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 374 transitions. [2018-11-23 12:47:52,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 12:47:52,627 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:52,627 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:52,627 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:52,627 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:52,627 INFO L82 PathProgramCache]: Analyzing trace with hash 454550748, now seen corresponding path program 1 times [2018-11-23 12:47:52,627 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:52,628 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:52,628 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:52,629 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:52,629 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:52,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:52,851 INFO L256 TraceCheckUtils]: 0: Hoare triple {22104#true} call ULTIMATE.init(); {22104#true} is VALID [2018-11-23 12:47:52,851 INFO L273 TraceCheckUtils]: 1: Hoare triple {22104#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,851 INFO L273 TraceCheckUtils]: 2: Hoare triple {22104#true} assume true; {22104#true} is VALID [2018-11-23 12:47:52,851 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {22104#true} {22104#true} #632#return; {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L256 TraceCheckUtils]: 4: Hoare triple {22104#true} call #t~ret138 := main(); {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 5: Hoare triple {22104#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L256 TraceCheckUtils]: 6: Hoare triple {22104#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 7: Hoare triple {22104#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 8: Hoare triple {22104#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 9: Hoare triple {22104#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 10: Hoare triple {22104#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 11: Hoare triple {22104#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,852 INFO L273 TraceCheckUtils]: 12: Hoare triple {22104#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 13: Hoare triple {22104#true} assume !false; {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 14: Hoare triple {22104#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 15: Hoare triple {22104#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 16: Hoare triple {22104#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 17: Hoare triple {22104#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 18: Hoare triple {22104#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 19: Hoare triple {22104#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,853 INFO L273 TraceCheckUtils]: 20: Hoare triple {22104#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 21: Hoare triple {22104#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 22: Hoare triple {22104#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 23: Hoare triple {22104#true} assume 8464 == #t~mem32;havoc #t~mem32; {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 24: Hoare triple {22104#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 25: Hoare triple {22104#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 26: Hoare triple {22104#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 27: Hoare triple {22104#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 28: Hoare triple {22104#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {22104#true} is VALID [2018-11-23 12:47:52,854 INFO L273 TraceCheckUtils]: 29: Hoare triple {22104#true} ~skip~0 := 0; {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 30: Hoare triple {22104#true} assume !false; {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 31: Hoare triple {22104#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 32: Hoare triple {22104#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 33: Hoare triple {22104#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 34: Hoare triple {22104#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 35: Hoare triple {22104#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 36: Hoare triple {22104#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 37: Hoare triple {22104#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,855 INFO L273 TraceCheckUtils]: 38: Hoare triple {22104#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,856 INFO L273 TraceCheckUtils]: 39: Hoare triple {22104#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,856 INFO L273 TraceCheckUtils]: 40: Hoare triple {22104#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,856 INFO L273 TraceCheckUtils]: 41: Hoare triple {22104#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,856 INFO L273 TraceCheckUtils]: 42: Hoare triple {22104#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,856 INFO L273 TraceCheckUtils]: 43: Hoare triple {22104#true} assume 8496 == #t~mem35;havoc #t~mem35; {22104#true} is VALID [2018-11-23 12:47:52,856 INFO L273 TraceCheckUtils]: 44: Hoare triple {22104#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {22104#true} is VALID [2018-11-23 12:47:52,857 INFO L273 TraceCheckUtils]: 45: Hoare triple {22104#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {22104#true} is VALID [2018-11-23 12:47:52,857 INFO L273 TraceCheckUtils]: 46: Hoare triple {22104#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {22104#true} is VALID [2018-11-23 12:47:52,873 INFO L273 TraceCheckUtils]: 47: Hoare triple {22104#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,875 INFO L273 TraceCheckUtils]: 48: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,875 INFO L273 TraceCheckUtils]: 49: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,880 INFO L273 TraceCheckUtils]: 50: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,880 INFO L273 TraceCheckUtils]: 51: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,880 INFO L273 TraceCheckUtils]: 52: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,881 INFO L273 TraceCheckUtils]: 53: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,881 INFO L273 TraceCheckUtils]: 54: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,881 INFO L273 TraceCheckUtils]: 55: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,882 INFO L273 TraceCheckUtils]: 56: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,882 INFO L273 TraceCheckUtils]: 57: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,882 INFO L273 TraceCheckUtils]: 58: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,884 INFO L273 TraceCheckUtils]: 59: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,885 INFO L273 TraceCheckUtils]: 60: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,885 INFO L273 TraceCheckUtils]: 61: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,886 INFO L273 TraceCheckUtils]: 62: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,886 INFO L273 TraceCheckUtils]: 63: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,887 INFO L273 TraceCheckUtils]: 64: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,887 INFO L273 TraceCheckUtils]: 65: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,887 INFO L273 TraceCheckUtils]: 66: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,887 INFO L273 TraceCheckUtils]: 67: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,888 INFO L273 TraceCheckUtils]: 68: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,888 INFO L273 TraceCheckUtils]: 69: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,889 INFO L273 TraceCheckUtils]: 70: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,889 INFO L273 TraceCheckUtils]: 71: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,890 INFO L273 TraceCheckUtils]: 72: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,890 INFO L273 TraceCheckUtils]: 73: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,891 INFO L273 TraceCheckUtils]: 74: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,891 INFO L273 TraceCheckUtils]: 75: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,892 INFO L273 TraceCheckUtils]: 76: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,893 INFO L273 TraceCheckUtils]: 77: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,893 INFO L273 TraceCheckUtils]: 78: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,894 INFO L273 TraceCheckUtils]: 79: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,894 INFO L273 TraceCheckUtils]: 80: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:52,895 INFO L273 TraceCheckUtils]: 81: Hoare triple {22106#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {22107#(= 8656 |ssl3_accept_#t~mem52|)} is VALID [2018-11-23 12:47:52,896 INFO L273 TraceCheckUtils]: 82: Hoare triple {22107#(= 8656 |ssl3_accept_#t~mem52|)} assume 8640 == #t~mem52;havoc #t~mem52; {22105#false} is VALID [2018-11-23 12:47:52,896 INFO L273 TraceCheckUtils]: 83: Hoare triple {22105#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {22105#false} is VALID [2018-11-23 12:47:52,896 INFO L273 TraceCheckUtils]: 84: Hoare triple {22105#false} assume 4 == ~blastFlag~0; {22105#false} is VALID [2018-11-23 12:47:52,897 INFO L273 TraceCheckUtils]: 85: Hoare triple {22105#false} assume !false; {22105#false} is VALID [2018-11-23 12:47:52,907 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:52,907 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:52,907 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:52,908 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 12:47:52,908 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:52,908 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:53,005 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:53,005 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:53,006 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:53,006 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:53,006 INFO L87 Difference]: Start difference. First operand 249 states and 374 transitions. Second operand 4 states. [2018-11-23 12:47:54,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,821 INFO L93 Difference]: Finished difference Result 538 states and 811 transitions. [2018-11-23 12:47:54,821 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:54,821 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 12:47:54,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:54,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:54,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 552 transitions. [2018-11-23 12:47:54,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:54,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 552 transitions. [2018-11-23 12:47:54,825 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 552 transitions. [2018-11-23 12:47:55,378 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 552 edges. 552 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:55,384 INFO L225 Difference]: With dead ends: 538 [2018-11-23 12:47:55,384 INFO L226 Difference]: Without dead ends: 314 [2018-11-23 12:47:55,385 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:55,385 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2018-11-23 12:47:55,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 259. [2018-11-23 12:47:55,520 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:55,520 INFO L82 GeneralOperation]: Start isEquivalent. First operand 314 states. Second operand 259 states. [2018-11-23 12:47:55,520 INFO L74 IsIncluded]: Start isIncluded. First operand 314 states. Second operand 259 states. [2018-11-23 12:47:55,520 INFO L87 Difference]: Start difference. First operand 314 states. Second operand 259 states. [2018-11-23 12:47:55,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:55,526 INFO L93 Difference]: Finished difference Result 314 states and 464 transitions. [2018-11-23 12:47:55,526 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 464 transitions. [2018-11-23 12:47:55,526 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:55,526 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:55,526 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand 314 states. [2018-11-23 12:47:55,526 INFO L87 Difference]: Start difference. First operand 259 states. Second operand 314 states. [2018-11-23 12:47:55,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:55,532 INFO L93 Difference]: Finished difference Result 314 states and 464 transitions. [2018-11-23 12:47:55,532 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 464 transitions. [2018-11-23 12:47:55,533 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:55,533 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:55,533 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:55,533 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:55,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-11-23 12:47:55,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 393 transitions. [2018-11-23 12:47:55,538 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 393 transitions. Word has length 86 [2018-11-23 12:47:55,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:55,538 INFO L480 AbstractCegarLoop]: Abstraction has 259 states and 393 transitions. [2018-11-23 12:47:55,538 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:55,538 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 393 transitions. [2018-11-23 12:47:55,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 12:47:55,539 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:55,539 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:55,539 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:55,539 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:55,539 INFO L82 PathProgramCache]: Analyzing trace with hash 1199163944, now seen corresponding path program 1 times [2018-11-23 12:47:55,540 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:55,540 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:55,541 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:55,541 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:55,541 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:55,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:55,974 INFO L256 TraceCheckUtils]: 0: Hoare triple {23663#true} call ULTIMATE.init(); {23663#true} is VALID [2018-11-23 12:47:55,974 INFO L273 TraceCheckUtils]: 1: Hoare triple {23663#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,974 INFO L273 TraceCheckUtils]: 2: Hoare triple {23663#true} assume true; {23663#true} is VALID [2018-11-23 12:47:55,974 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23663#true} {23663#true} #632#return; {23663#true} is VALID [2018-11-23 12:47:55,974 INFO L256 TraceCheckUtils]: 4: Hoare triple {23663#true} call #t~ret138 := main(); {23663#true} is VALID [2018-11-23 12:47:55,974 INFO L273 TraceCheckUtils]: 5: Hoare triple {23663#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,974 INFO L256 TraceCheckUtils]: 6: Hoare triple {23663#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {23663#true} is VALID [2018-11-23 12:47:55,975 INFO L273 TraceCheckUtils]: 7: Hoare triple {23663#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,975 INFO L273 TraceCheckUtils]: 8: Hoare triple {23663#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {23663#true} is VALID [2018-11-23 12:47:55,975 INFO L273 TraceCheckUtils]: 9: Hoare triple {23663#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {23663#true} is VALID [2018-11-23 12:47:55,975 INFO L273 TraceCheckUtils]: 10: Hoare triple {23663#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {23663#true} is VALID [2018-11-23 12:47:55,975 INFO L273 TraceCheckUtils]: 11: Hoare triple {23663#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,975 INFO L273 TraceCheckUtils]: 12: Hoare triple {23663#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 13: Hoare triple {23663#true} assume !false; {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 14: Hoare triple {23663#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 15: Hoare triple {23663#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 16: Hoare triple {23663#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 17: Hoare triple {23663#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 18: Hoare triple {23663#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 19: Hoare triple {23663#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,976 INFO L273 TraceCheckUtils]: 20: Hoare triple {23663#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 21: Hoare triple {23663#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 22: Hoare triple {23663#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 23: Hoare triple {23663#true} assume 8464 == #t~mem32;havoc #t~mem32; {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 24: Hoare triple {23663#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 25: Hoare triple {23663#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 26: Hoare triple {23663#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 27: Hoare triple {23663#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,977 INFO L273 TraceCheckUtils]: 28: Hoare triple {23663#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 29: Hoare triple {23663#true} ~skip~0 := 0; {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 30: Hoare triple {23663#true} assume !false; {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 31: Hoare triple {23663#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 32: Hoare triple {23663#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 33: Hoare triple {23663#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 34: Hoare triple {23663#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 35: Hoare triple {23663#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,978 INFO L273 TraceCheckUtils]: 36: Hoare triple {23663#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 37: Hoare triple {23663#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 38: Hoare triple {23663#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 39: Hoare triple {23663#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 40: Hoare triple {23663#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 41: Hoare triple {23663#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 42: Hoare triple {23663#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 43: Hoare triple {23663#true} assume 8496 == #t~mem35;havoc #t~mem35; {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 44: Hoare triple {23663#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {23663#true} is VALID [2018-11-23 12:47:55,979 INFO L273 TraceCheckUtils]: 45: Hoare triple {23663#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {23663#true} is VALID [2018-11-23 12:47:55,980 INFO L273 TraceCheckUtils]: 46: Hoare triple {23663#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {23663#true} is VALID [2018-11-23 12:47:55,980 INFO L273 TraceCheckUtils]: 47: Hoare triple {23663#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,981 INFO L273 TraceCheckUtils]: 48: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,981 INFO L273 TraceCheckUtils]: 49: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,982 INFO L273 TraceCheckUtils]: 50: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,982 INFO L273 TraceCheckUtils]: 51: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,982 INFO L273 TraceCheckUtils]: 52: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,983 INFO L273 TraceCheckUtils]: 53: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,983 INFO L273 TraceCheckUtils]: 54: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,984 INFO L273 TraceCheckUtils]: 55: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,984 INFO L273 TraceCheckUtils]: 56: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,985 INFO L273 TraceCheckUtils]: 57: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,985 INFO L273 TraceCheckUtils]: 58: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,985 INFO L273 TraceCheckUtils]: 59: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,986 INFO L273 TraceCheckUtils]: 60: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,986 INFO L273 TraceCheckUtils]: 61: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,987 INFO L273 TraceCheckUtils]: 62: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,987 INFO L273 TraceCheckUtils]: 63: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,988 INFO L273 TraceCheckUtils]: 64: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,988 INFO L273 TraceCheckUtils]: 65: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,989 INFO L273 TraceCheckUtils]: 66: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,989 INFO L273 TraceCheckUtils]: 67: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,990 INFO L273 TraceCheckUtils]: 68: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,990 INFO L273 TraceCheckUtils]: 69: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,991 INFO L273 TraceCheckUtils]: 70: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,991 INFO L273 TraceCheckUtils]: 71: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,992 INFO L273 TraceCheckUtils]: 72: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,992 INFO L273 TraceCheckUtils]: 73: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,993 INFO L273 TraceCheckUtils]: 74: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,993 INFO L273 TraceCheckUtils]: 75: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,994 INFO L273 TraceCheckUtils]: 76: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,994 INFO L273 TraceCheckUtils]: 77: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,995 INFO L273 TraceCheckUtils]: 78: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,995 INFO L273 TraceCheckUtils]: 79: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,996 INFO L273 TraceCheckUtils]: 80: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,996 INFO L273 TraceCheckUtils]: 81: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:55,997 INFO L273 TraceCheckUtils]: 82: Hoare triple {23665#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {23666#(= 8656 |ssl3_accept_#t~mem53|)} is VALID [2018-11-23 12:47:55,998 INFO L273 TraceCheckUtils]: 83: Hoare triple {23666#(= 8656 |ssl3_accept_#t~mem53|)} assume 8641 == #t~mem53;havoc #t~mem53; {23664#false} is VALID [2018-11-23 12:47:55,998 INFO L273 TraceCheckUtils]: 84: Hoare triple {23664#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {23664#false} is VALID [2018-11-23 12:47:55,998 INFO L273 TraceCheckUtils]: 85: Hoare triple {23664#false} assume 4 == ~blastFlag~0; {23664#false} is VALID [2018-11-23 12:47:55,998 INFO L273 TraceCheckUtils]: 86: Hoare triple {23664#false} assume !false; {23664#false} is VALID [2018-11-23 12:47:56,010 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:56,011 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:56,011 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:56,011 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 12:47:56,011 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:56,011 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:56,092 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:56,092 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:56,092 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:56,092 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:56,093 INFO L87 Difference]: Start difference. First operand 259 states and 393 transitions. Second operand 4 states. [2018-11-23 12:47:57,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:57,627 INFO L93 Difference]: Finished difference Result 542 states and 822 transitions. [2018-11-23 12:47:57,627 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:57,627 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 12:47:57,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:57,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:57,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 544 transitions. [2018-11-23 12:47:57,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:57,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 544 transitions. [2018-11-23 12:47:57,632 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 544 transitions. [2018-11-23 12:47:58,189 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 544 edges. 544 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:58,196 INFO L225 Difference]: With dead ends: 542 [2018-11-23 12:47:58,196 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 12:47:58,197 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:58,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 12:47:58,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 260. [2018-11-23 12:47:58,363 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:58,363 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand 260 states. [2018-11-23 12:47:58,363 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 260 states. [2018-11-23 12:47:58,364 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 260 states. [2018-11-23 12:47:58,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:58,370 INFO L93 Difference]: Finished difference Result 308 states and 456 transitions. [2018-11-23 12:47:58,370 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 456 transitions. [2018-11-23 12:47:58,370 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:58,370 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:58,371 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 308 states. [2018-11-23 12:47:58,371 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 308 states. [2018-11-23 12:47:58,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:58,379 INFO L93 Difference]: Finished difference Result 308 states and 456 transitions. [2018-11-23 12:47:58,379 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 456 transitions. [2018-11-23 12:47:58,379 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:58,380 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:58,380 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:58,380 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:58,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:47:58,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 394 transitions. [2018-11-23 12:47:58,387 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 394 transitions. Word has length 87 [2018-11-23 12:47:58,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:58,387 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 394 transitions. [2018-11-23 12:47:58,387 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:58,387 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 394 transitions. [2018-11-23 12:47:58,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 12:47:58,388 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:58,389 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:58,389 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:58,389 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:58,389 INFO L82 PathProgramCache]: Analyzing trace with hash 1774849204, now seen corresponding path program 1 times [2018-11-23 12:47:58,389 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:58,390 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:58,391 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:58,391 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:58,391 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:58,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:59,014 INFO L256 TraceCheckUtils]: 0: Hoare triple {25213#true} call ULTIMATE.init(); {25213#true} is VALID [2018-11-23 12:47:59,015 INFO L273 TraceCheckUtils]: 1: Hoare triple {25213#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,015 INFO L273 TraceCheckUtils]: 2: Hoare triple {25213#true} assume true; {25213#true} is VALID [2018-11-23 12:47:59,015 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {25213#true} {25213#true} #632#return; {25213#true} is VALID [2018-11-23 12:47:59,015 INFO L256 TraceCheckUtils]: 4: Hoare triple {25213#true} call #t~ret138 := main(); {25213#true} is VALID [2018-11-23 12:47:59,015 INFO L273 TraceCheckUtils]: 5: Hoare triple {25213#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,015 INFO L256 TraceCheckUtils]: 6: Hoare triple {25213#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {25213#true} is VALID [2018-11-23 12:47:59,016 INFO L273 TraceCheckUtils]: 7: Hoare triple {25213#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,016 INFO L273 TraceCheckUtils]: 8: Hoare triple {25213#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {25213#true} is VALID [2018-11-23 12:47:59,016 INFO L273 TraceCheckUtils]: 9: Hoare triple {25213#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {25213#true} is VALID [2018-11-23 12:47:59,016 INFO L273 TraceCheckUtils]: 10: Hoare triple {25213#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {25213#true} is VALID [2018-11-23 12:47:59,016 INFO L273 TraceCheckUtils]: 11: Hoare triple {25213#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,016 INFO L273 TraceCheckUtils]: 12: Hoare triple {25213#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 13: Hoare triple {25213#true} assume !false; {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 14: Hoare triple {25213#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 15: Hoare triple {25213#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 16: Hoare triple {25213#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 17: Hoare triple {25213#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 18: Hoare triple {25213#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,017 INFO L273 TraceCheckUtils]: 19: Hoare triple {25213#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 20: Hoare triple {25213#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 21: Hoare triple {25213#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 22: Hoare triple {25213#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 23: Hoare triple {25213#true} assume 8464 == #t~mem32;havoc #t~mem32; {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 24: Hoare triple {25213#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 25: Hoare triple {25213#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {25213#true} is VALID [2018-11-23 12:47:59,018 INFO L273 TraceCheckUtils]: 26: Hoare triple {25213#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 27: Hoare triple {25213#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 28: Hoare triple {25213#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 29: Hoare triple {25213#true} ~skip~0 := 0; {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 30: Hoare triple {25213#true} assume !false; {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 31: Hoare triple {25213#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 32: Hoare triple {25213#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,019 INFO L273 TraceCheckUtils]: 33: Hoare triple {25213#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 34: Hoare triple {25213#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 35: Hoare triple {25213#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 36: Hoare triple {25213#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 37: Hoare triple {25213#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 38: Hoare triple {25213#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 39: Hoare triple {25213#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,020 INFO L273 TraceCheckUtils]: 40: Hoare triple {25213#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,021 INFO L273 TraceCheckUtils]: 41: Hoare triple {25213#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,021 INFO L273 TraceCheckUtils]: 42: Hoare triple {25213#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,021 INFO L273 TraceCheckUtils]: 43: Hoare triple {25213#true} assume 8496 == #t~mem35;havoc #t~mem35; {25213#true} is VALID [2018-11-23 12:47:59,021 INFO L273 TraceCheckUtils]: 44: Hoare triple {25213#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {25213#true} is VALID [2018-11-23 12:47:59,021 INFO L273 TraceCheckUtils]: 45: Hoare triple {25213#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {25213#true} is VALID [2018-11-23 12:47:59,021 INFO L273 TraceCheckUtils]: 46: Hoare triple {25213#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {25213#true} is VALID [2018-11-23 12:47:59,022 INFO L273 TraceCheckUtils]: 47: Hoare triple {25213#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,024 INFO L273 TraceCheckUtils]: 48: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,024 INFO L273 TraceCheckUtils]: 49: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,025 INFO L273 TraceCheckUtils]: 50: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,025 INFO L273 TraceCheckUtils]: 51: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,026 INFO L273 TraceCheckUtils]: 52: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,026 INFO L273 TraceCheckUtils]: 53: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,027 INFO L273 TraceCheckUtils]: 54: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,028 INFO L273 TraceCheckUtils]: 55: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,028 INFO L273 TraceCheckUtils]: 56: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,029 INFO L273 TraceCheckUtils]: 57: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:59,030 INFO L273 TraceCheckUtils]: 58: Hoare triple {25215#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25216#(= 8656 |ssl3_accept_#t~mem29|)} is VALID [2018-11-23 12:47:59,030 INFO L273 TraceCheckUtils]: 59: Hoare triple {25216#(= 8656 |ssl3_accept_#t~mem29|)} assume 8480 == #t~mem29;havoc #t~mem29; {25214#false} is VALID [2018-11-23 12:47:59,030 INFO L273 TraceCheckUtils]: 60: Hoare triple {25214#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {25214#false} is VALID [2018-11-23 12:47:59,031 INFO L273 TraceCheckUtils]: 61: Hoare triple {25214#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,031 INFO L273 TraceCheckUtils]: 62: Hoare triple {25214#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,031 INFO L273 TraceCheckUtils]: 63: Hoare triple {25214#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {25214#false} is VALID [2018-11-23 12:47:59,032 INFO L273 TraceCheckUtils]: 64: Hoare triple {25214#false} ~skip~0 := 0; {25214#false} is VALID [2018-11-23 12:47:59,032 INFO L273 TraceCheckUtils]: 65: Hoare triple {25214#false} assume !false; {25214#false} is VALID [2018-11-23 12:47:59,032 INFO L273 TraceCheckUtils]: 66: Hoare triple {25214#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,032 INFO L273 TraceCheckUtils]: 67: Hoare triple {25214#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,033 INFO L273 TraceCheckUtils]: 68: Hoare triple {25214#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,033 INFO L273 TraceCheckUtils]: 69: Hoare triple {25214#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,033 INFO L273 TraceCheckUtils]: 70: Hoare triple {25214#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,033 INFO L273 TraceCheckUtils]: 71: Hoare triple {25214#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,034 INFO L273 TraceCheckUtils]: 72: Hoare triple {25214#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,034 INFO L273 TraceCheckUtils]: 73: Hoare triple {25214#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,034 INFO L273 TraceCheckUtils]: 74: Hoare triple {25214#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,034 INFO L273 TraceCheckUtils]: 75: Hoare triple {25214#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,034 INFO L273 TraceCheckUtils]: 76: Hoare triple {25214#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,035 INFO L273 TraceCheckUtils]: 77: Hoare triple {25214#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,035 INFO L273 TraceCheckUtils]: 78: Hoare triple {25214#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,035 INFO L273 TraceCheckUtils]: 79: Hoare triple {25214#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,035 INFO L273 TraceCheckUtils]: 80: Hoare triple {25214#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,035 INFO L273 TraceCheckUtils]: 81: Hoare triple {25214#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,035 INFO L273 TraceCheckUtils]: 82: Hoare triple {25214#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 83: Hoare triple {25214#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 84: Hoare triple {25214#false} assume 8544 == #t~mem41;havoc #t~mem41; {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 85: Hoare triple {25214#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 86: Hoare triple {25214#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 87: Hoare triple {25214#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 88: Hoare triple {25214#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {25214#false} is VALID [2018-11-23 12:47:59,036 INFO L273 TraceCheckUtils]: 89: Hoare triple {25214#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {25214#false} is VALID [2018-11-23 12:47:59,037 INFO L273 TraceCheckUtils]: 90: Hoare triple {25214#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {25214#false} is VALID [2018-11-23 12:47:59,037 INFO L273 TraceCheckUtils]: 91: Hoare triple {25214#false} assume 8 == ~blastFlag~0; {25214#false} is VALID [2018-11-23 12:47:59,037 INFO L273 TraceCheckUtils]: 92: Hoare triple {25214#false} assume !false; {25214#false} is VALID [2018-11-23 12:47:59,047 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:47:59,047 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:59,048 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:59,048 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:47:59,048 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:59,048 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:59,174 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:59,174 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:59,174 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:59,174 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:59,175 INFO L87 Difference]: Start difference. First operand 260 states and 394 transitions. Second operand 4 states. [2018-11-23 12:48:00,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:00,627 INFO L93 Difference]: Finished difference Result 543 states and 822 transitions. [2018-11-23 12:48:00,627 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:00,627 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:00,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:00,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:00,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 543 transitions. [2018-11-23 12:48:00,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:00,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 543 transitions. [2018-11-23 12:48:00,632 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 543 transitions. [2018-11-23 12:48:01,189 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 543 edges. 543 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:01,195 INFO L225 Difference]: With dead ends: 543 [2018-11-23 12:48:01,195 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 12:48:01,196 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:01,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 12:48:01,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 260. [2018-11-23 12:48:01,283 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:01,283 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:01,283 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:01,283 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:01,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:01,289 INFO L93 Difference]: Finished difference Result 308 states and 455 transitions. [2018-11-23 12:48:01,289 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 455 transitions. [2018-11-23 12:48:01,289 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:01,289 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:01,289 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 308 states. [2018-11-23 12:48:01,290 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 308 states. [2018-11-23 12:48:01,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:01,295 INFO L93 Difference]: Finished difference Result 308 states and 455 transitions. [2018-11-23 12:48:01,295 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 455 transitions. [2018-11-23 12:48:01,295 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:01,296 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:01,296 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:01,296 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:01,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:01,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 393 transitions. [2018-11-23 12:48:01,300 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 393 transitions. Word has length 93 [2018-11-23 12:48:01,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:01,300 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 393 transitions. [2018-11-23 12:48:01,300 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:01,300 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 393 transitions. [2018-11-23 12:48:01,301 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 12:48:01,301 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:01,301 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:01,301 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:01,301 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:01,301 INFO L82 PathProgramCache]: Analyzing trace with hash -591845390, now seen corresponding path program 1 times [2018-11-23 12:48:01,302 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:01,302 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:01,302 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:01,303 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:01,303 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:01,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:01,944 WARN L180 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 6 DAG size of output: 3 [2018-11-23 12:48:02,066 INFO L256 TraceCheckUtils]: 0: Hoare triple {26764#true} call ULTIMATE.init(); {26764#true} is VALID [2018-11-23 12:48:02,066 INFO L273 TraceCheckUtils]: 1: Hoare triple {26764#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,066 INFO L273 TraceCheckUtils]: 2: Hoare triple {26764#true} assume true; {26764#true} is VALID [2018-11-23 12:48:02,067 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {26764#true} {26764#true} #632#return; {26764#true} is VALID [2018-11-23 12:48:02,067 INFO L256 TraceCheckUtils]: 4: Hoare triple {26764#true} call #t~ret138 := main(); {26764#true} is VALID [2018-11-23 12:48:02,067 INFO L273 TraceCheckUtils]: 5: Hoare triple {26764#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,067 INFO L256 TraceCheckUtils]: 6: Hoare triple {26764#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {26764#true} is VALID [2018-11-23 12:48:02,067 INFO L273 TraceCheckUtils]: 7: Hoare triple {26764#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,068 INFO L273 TraceCheckUtils]: 8: Hoare triple {26764#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {26764#true} is VALID [2018-11-23 12:48:02,068 INFO L273 TraceCheckUtils]: 9: Hoare triple {26764#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {26764#true} is VALID [2018-11-23 12:48:02,068 INFO L273 TraceCheckUtils]: 10: Hoare triple {26764#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {26764#true} is VALID [2018-11-23 12:48:02,068 INFO L273 TraceCheckUtils]: 11: Hoare triple {26764#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,068 INFO L273 TraceCheckUtils]: 12: Hoare triple {26764#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {26764#true} is VALID [2018-11-23 12:48:02,069 INFO L273 TraceCheckUtils]: 13: Hoare triple {26764#true} assume !false; {26764#true} is VALID [2018-11-23 12:48:02,069 INFO L273 TraceCheckUtils]: 14: Hoare triple {26764#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,069 INFO L273 TraceCheckUtils]: 15: Hoare triple {26764#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,069 INFO L273 TraceCheckUtils]: 16: Hoare triple {26764#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,069 INFO L273 TraceCheckUtils]: 17: Hoare triple {26764#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,070 INFO L273 TraceCheckUtils]: 18: Hoare triple {26764#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,070 INFO L273 TraceCheckUtils]: 19: Hoare triple {26764#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,070 INFO L273 TraceCheckUtils]: 20: Hoare triple {26764#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,070 INFO L273 TraceCheckUtils]: 21: Hoare triple {26764#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,070 INFO L273 TraceCheckUtils]: 22: Hoare triple {26764#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,070 INFO L273 TraceCheckUtils]: 23: Hoare triple {26764#true} assume 8464 == #t~mem32;havoc #t~mem32; {26764#true} is VALID [2018-11-23 12:48:02,071 INFO L273 TraceCheckUtils]: 24: Hoare triple {26764#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {26764#true} is VALID [2018-11-23 12:48:02,071 INFO L273 TraceCheckUtils]: 25: Hoare triple {26764#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {26764#true} is VALID [2018-11-23 12:48:02,071 INFO L273 TraceCheckUtils]: 26: Hoare triple {26764#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,071 INFO L273 TraceCheckUtils]: 27: Hoare triple {26764#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,071 INFO L273 TraceCheckUtils]: 28: Hoare triple {26764#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {26764#true} is VALID [2018-11-23 12:48:02,072 INFO L273 TraceCheckUtils]: 29: Hoare triple {26764#true} ~skip~0 := 0; {26764#true} is VALID [2018-11-23 12:48:02,072 INFO L273 TraceCheckUtils]: 30: Hoare triple {26764#true} assume !false; {26764#true} is VALID [2018-11-23 12:48:02,072 INFO L273 TraceCheckUtils]: 31: Hoare triple {26764#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,072 INFO L273 TraceCheckUtils]: 32: Hoare triple {26764#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,072 INFO L273 TraceCheckUtils]: 33: Hoare triple {26764#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,072 INFO L273 TraceCheckUtils]: 34: Hoare triple {26764#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,073 INFO L273 TraceCheckUtils]: 35: Hoare triple {26764#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,073 INFO L273 TraceCheckUtils]: 36: Hoare triple {26764#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,073 INFO L273 TraceCheckUtils]: 37: Hoare triple {26764#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,073 INFO L273 TraceCheckUtils]: 38: Hoare triple {26764#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,073 INFO L273 TraceCheckUtils]: 39: Hoare triple {26764#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,073 INFO L273 TraceCheckUtils]: 40: Hoare triple {26764#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,074 INFO L273 TraceCheckUtils]: 41: Hoare triple {26764#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,074 INFO L273 TraceCheckUtils]: 42: Hoare triple {26764#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,074 INFO L273 TraceCheckUtils]: 43: Hoare triple {26764#true} assume 8496 == #t~mem35;havoc #t~mem35; {26764#true} is VALID [2018-11-23 12:48:02,074 INFO L273 TraceCheckUtils]: 44: Hoare triple {26764#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {26764#true} is VALID [2018-11-23 12:48:02,074 INFO L273 TraceCheckUtils]: 45: Hoare triple {26764#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {26764#true} is VALID [2018-11-23 12:48:02,075 INFO L273 TraceCheckUtils]: 46: Hoare triple {26764#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {26764#true} is VALID [2018-11-23 12:48:02,089 INFO L273 TraceCheckUtils]: 47: Hoare triple {26764#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,104 INFO L273 TraceCheckUtils]: 48: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,113 INFO L273 TraceCheckUtils]: 49: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,128 INFO L273 TraceCheckUtils]: 50: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,137 INFO L273 TraceCheckUtils]: 51: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,153 INFO L273 TraceCheckUtils]: 52: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,162 INFO L273 TraceCheckUtils]: 53: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,175 INFO L273 TraceCheckUtils]: 54: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,187 INFO L273 TraceCheckUtils]: 55: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,206 INFO L273 TraceCheckUtils]: 56: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,215 INFO L273 TraceCheckUtils]: 57: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:02,228 INFO L273 TraceCheckUtils]: 58: Hoare triple {26766#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26767#(= 8512 |ssl3_accept_#t~mem29|)} is VALID [2018-11-23 12:48:02,240 INFO L273 TraceCheckUtils]: 59: Hoare triple {26767#(= 8512 |ssl3_accept_#t~mem29|)} assume 8480 == #t~mem29;havoc #t~mem29; {26765#false} is VALID [2018-11-23 12:48:02,240 INFO L273 TraceCheckUtils]: 60: Hoare triple {26765#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {26765#false} is VALID [2018-11-23 12:48:02,241 INFO L273 TraceCheckUtils]: 61: Hoare triple {26765#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,241 INFO L273 TraceCheckUtils]: 62: Hoare triple {26765#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,241 INFO L273 TraceCheckUtils]: 63: Hoare triple {26765#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {26765#false} is VALID [2018-11-23 12:48:02,241 INFO L273 TraceCheckUtils]: 64: Hoare triple {26765#false} ~skip~0 := 0; {26765#false} is VALID [2018-11-23 12:48:02,241 INFO L273 TraceCheckUtils]: 65: Hoare triple {26765#false} assume !false; {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 66: Hoare triple {26765#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 67: Hoare triple {26765#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 68: Hoare triple {26765#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 69: Hoare triple {26765#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 70: Hoare triple {26765#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 71: Hoare triple {26765#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,242 INFO L273 TraceCheckUtils]: 72: Hoare triple {26765#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,243 INFO L273 TraceCheckUtils]: 73: Hoare triple {26765#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,243 INFO L273 TraceCheckUtils]: 74: Hoare triple {26765#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,243 INFO L273 TraceCheckUtils]: 75: Hoare triple {26765#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,243 INFO L273 TraceCheckUtils]: 76: Hoare triple {26765#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,243 INFO L273 TraceCheckUtils]: 77: Hoare triple {26765#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,243 INFO L273 TraceCheckUtils]: 78: Hoare triple {26765#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,244 INFO L273 TraceCheckUtils]: 79: Hoare triple {26765#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,244 INFO L273 TraceCheckUtils]: 80: Hoare triple {26765#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,244 INFO L273 TraceCheckUtils]: 81: Hoare triple {26765#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,244 INFO L273 TraceCheckUtils]: 82: Hoare triple {26765#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,244 INFO L273 TraceCheckUtils]: 83: Hoare triple {26765#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,244 INFO L273 TraceCheckUtils]: 84: Hoare triple {26765#false} assume 8544 == #t~mem41;havoc #t~mem41; {26765#false} is VALID [2018-11-23 12:48:02,245 INFO L273 TraceCheckUtils]: 85: Hoare triple {26765#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,245 INFO L273 TraceCheckUtils]: 86: Hoare triple {26765#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,245 INFO L273 TraceCheckUtils]: 87: Hoare triple {26765#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {26765#false} is VALID [2018-11-23 12:48:02,245 INFO L273 TraceCheckUtils]: 88: Hoare triple {26765#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {26765#false} is VALID [2018-11-23 12:48:02,245 INFO L273 TraceCheckUtils]: 89: Hoare triple {26765#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {26765#false} is VALID [2018-11-23 12:48:02,245 INFO L273 TraceCheckUtils]: 90: Hoare triple {26765#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {26765#false} is VALID [2018-11-23 12:48:02,246 INFO L273 TraceCheckUtils]: 91: Hoare triple {26765#false} assume 8 == ~blastFlag~0; {26765#false} is VALID [2018-11-23 12:48:02,246 INFO L273 TraceCheckUtils]: 92: Hoare triple {26765#false} assume !false; {26765#false} is VALID [2018-11-23 12:48:02,254 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:02,254 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:02,255 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:02,255 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:02,255 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:02,255 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:02,474 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:02,474 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:02,475 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:02,475 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:02,475 INFO L87 Difference]: Start difference. First operand 260 states and 393 transitions. Second operand 4 states. [2018-11-23 12:48:03,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:03,769 INFO L93 Difference]: Finished difference Result 520 states and 790 transitions. [2018-11-23 12:48:03,769 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:03,769 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:03,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:03,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:03,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 483 transitions. [2018-11-23 12:48:03,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:03,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 483 transitions. [2018-11-23 12:48:03,774 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 483 transitions. [2018-11-23 12:48:04,233 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 483 edges. 483 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:04,239 INFO L225 Difference]: With dead ends: 520 [2018-11-23 12:48:04,239 INFO L226 Difference]: Without dead ends: 285 [2018-11-23 12:48:04,240 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:04,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2018-11-23 12:48:04,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 260. [2018-11-23 12:48:04,419 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:04,419 INFO L82 GeneralOperation]: Start isEquivalent. First operand 285 states. Second operand 260 states. [2018-11-23 12:48:04,419 INFO L74 IsIncluded]: Start isIncluded. First operand 285 states. Second operand 260 states. [2018-11-23 12:48:04,419 INFO L87 Difference]: Start difference. First operand 285 states. Second operand 260 states. [2018-11-23 12:48:04,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:04,425 INFO L93 Difference]: Finished difference Result 285 states and 424 transitions. [2018-11-23 12:48:04,425 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 424 transitions. [2018-11-23 12:48:04,426 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:04,426 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:04,426 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 285 states. [2018-11-23 12:48:04,426 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 285 states. [2018-11-23 12:48:04,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:04,432 INFO L93 Difference]: Finished difference Result 285 states and 424 transitions. [2018-11-23 12:48:04,432 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 424 transitions. [2018-11-23 12:48:04,433 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:04,433 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:04,433 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:04,433 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:04,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:04,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 392 transitions. [2018-11-23 12:48:04,438 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 392 transitions. Word has length 93 [2018-11-23 12:48:04,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:04,438 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 392 transitions. [2018-11-23 12:48:04,438 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:04,438 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 392 transitions. [2018-11-23 12:48:04,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:04,439 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:04,439 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:04,439 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:04,439 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:04,439 INFO L82 PathProgramCache]: Analyzing trace with hash -1148102909, now seen corresponding path program 1 times [2018-11-23 12:48:04,439 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:04,439 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:04,440 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:04,440 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:04,440 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:04,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:04,605 INFO L256 TraceCheckUtils]: 0: Hoare triple {28238#true} call ULTIMATE.init(); {28238#true} is VALID [2018-11-23 12:48:04,606 INFO L273 TraceCheckUtils]: 1: Hoare triple {28238#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,606 INFO L273 TraceCheckUtils]: 2: Hoare triple {28238#true} assume true; {28238#true} is VALID [2018-11-23 12:48:04,606 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {28238#true} {28238#true} #632#return; {28238#true} is VALID [2018-11-23 12:48:04,606 INFO L256 TraceCheckUtils]: 4: Hoare triple {28238#true} call #t~ret138 := main(); {28238#true} is VALID [2018-11-23 12:48:04,607 INFO L273 TraceCheckUtils]: 5: Hoare triple {28238#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,607 INFO L256 TraceCheckUtils]: 6: Hoare triple {28238#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {28238#true} is VALID [2018-11-23 12:48:04,607 INFO L273 TraceCheckUtils]: 7: Hoare triple {28238#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,607 INFO L273 TraceCheckUtils]: 8: Hoare triple {28238#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {28238#true} is VALID [2018-11-23 12:48:04,607 INFO L273 TraceCheckUtils]: 9: Hoare triple {28238#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {28238#true} is VALID [2018-11-23 12:48:04,608 INFO L273 TraceCheckUtils]: 10: Hoare triple {28238#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {28238#true} is VALID [2018-11-23 12:48:04,608 INFO L273 TraceCheckUtils]: 11: Hoare triple {28238#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,608 INFO L273 TraceCheckUtils]: 12: Hoare triple {28238#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {28238#true} is VALID [2018-11-23 12:48:04,608 INFO L273 TraceCheckUtils]: 13: Hoare triple {28238#true} assume !false; {28238#true} is VALID [2018-11-23 12:48:04,608 INFO L273 TraceCheckUtils]: 14: Hoare triple {28238#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,608 INFO L273 TraceCheckUtils]: 15: Hoare triple {28238#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 16: Hoare triple {28238#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 17: Hoare triple {28238#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 18: Hoare triple {28238#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 19: Hoare triple {28238#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 20: Hoare triple {28238#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 21: Hoare triple {28238#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 22: Hoare triple {28238#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 23: Hoare triple {28238#true} assume 8464 == #t~mem32;havoc #t~mem32; {28238#true} is VALID [2018-11-23 12:48:04,609 INFO L273 TraceCheckUtils]: 24: Hoare triple {28238#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 25: Hoare triple {28238#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 26: Hoare triple {28238#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 27: Hoare triple {28238#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 28: Hoare triple {28238#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 29: Hoare triple {28238#true} ~skip~0 := 0; {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 30: Hoare triple {28238#true} assume !false; {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 31: Hoare triple {28238#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,610 INFO L273 TraceCheckUtils]: 32: Hoare triple {28238#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 33: Hoare triple {28238#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 34: Hoare triple {28238#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 35: Hoare triple {28238#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 36: Hoare triple {28238#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 37: Hoare triple {28238#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 38: Hoare triple {28238#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 39: Hoare triple {28238#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,611 INFO L273 TraceCheckUtils]: 40: Hoare triple {28238#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,612 INFO L273 TraceCheckUtils]: 41: Hoare triple {28238#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,612 INFO L273 TraceCheckUtils]: 42: Hoare triple {28238#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,612 INFO L273 TraceCheckUtils]: 43: Hoare triple {28238#true} assume 8496 == #t~mem35;havoc #t~mem35; {28238#true} is VALID [2018-11-23 12:48:04,612 INFO L273 TraceCheckUtils]: 44: Hoare triple {28238#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {28238#true} is VALID [2018-11-23 12:48:04,612 INFO L273 TraceCheckUtils]: 45: Hoare triple {28238#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {28238#true} is VALID [2018-11-23 12:48:04,613 INFO L273 TraceCheckUtils]: 46: Hoare triple {28238#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {28238#true} is VALID [2018-11-23 12:48:04,620 INFO L273 TraceCheckUtils]: 47: Hoare triple {28238#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,621 INFO L273 TraceCheckUtils]: 48: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,622 INFO L273 TraceCheckUtils]: 49: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,623 INFO L273 TraceCheckUtils]: 50: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,623 INFO L273 TraceCheckUtils]: 51: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,625 INFO L273 TraceCheckUtils]: 52: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,625 INFO L273 TraceCheckUtils]: 53: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,625 INFO L273 TraceCheckUtils]: 54: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,626 INFO L273 TraceCheckUtils]: 55: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,627 INFO L273 TraceCheckUtils]: 56: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,627 INFO L273 TraceCheckUtils]: 57: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,627 INFO L273 TraceCheckUtils]: 58: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:04,628 INFO L273 TraceCheckUtils]: 59: Hoare triple {28240#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28241#(= 8656 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:48:04,628 INFO L273 TraceCheckUtils]: 60: Hoare triple {28241#(= 8656 |ssl3_accept_#t~mem30|)} assume 8481 == #t~mem30;havoc #t~mem30; {28239#false} is VALID [2018-11-23 12:48:04,628 INFO L273 TraceCheckUtils]: 61: Hoare triple {28239#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {28239#false} is VALID [2018-11-23 12:48:04,628 INFO L273 TraceCheckUtils]: 62: Hoare triple {28239#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,629 INFO L273 TraceCheckUtils]: 63: Hoare triple {28239#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,629 INFO L273 TraceCheckUtils]: 64: Hoare triple {28239#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {28239#false} is VALID [2018-11-23 12:48:04,629 INFO L273 TraceCheckUtils]: 65: Hoare triple {28239#false} ~skip~0 := 0; {28239#false} is VALID [2018-11-23 12:48:04,629 INFO L273 TraceCheckUtils]: 66: Hoare triple {28239#false} assume !false; {28239#false} is VALID [2018-11-23 12:48:04,629 INFO L273 TraceCheckUtils]: 67: Hoare triple {28239#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,630 INFO L273 TraceCheckUtils]: 68: Hoare triple {28239#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,630 INFO L273 TraceCheckUtils]: 69: Hoare triple {28239#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,630 INFO L273 TraceCheckUtils]: 70: Hoare triple {28239#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,630 INFO L273 TraceCheckUtils]: 71: Hoare triple {28239#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,630 INFO L273 TraceCheckUtils]: 72: Hoare triple {28239#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,631 INFO L273 TraceCheckUtils]: 73: Hoare triple {28239#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,631 INFO L273 TraceCheckUtils]: 74: Hoare triple {28239#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,631 INFO L273 TraceCheckUtils]: 75: Hoare triple {28239#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,631 INFO L273 TraceCheckUtils]: 76: Hoare triple {28239#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,632 INFO L273 TraceCheckUtils]: 77: Hoare triple {28239#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,632 INFO L273 TraceCheckUtils]: 78: Hoare triple {28239#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,632 INFO L273 TraceCheckUtils]: 79: Hoare triple {28239#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,632 INFO L273 TraceCheckUtils]: 80: Hoare triple {28239#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,632 INFO L273 TraceCheckUtils]: 81: Hoare triple {28239#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,632 INFO L273 TraceCheckUtils]: 82: Hoare triple {28239#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 83: Hoare triple {28239#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 84: Hoare triple {28239#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 85: Hoare triple {28239#false} assume 8544 == #t~mem41;havoc #t~mem41; {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 86: Hoare triple {28239#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 87: Hoare triple {28239#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 88: Hoare triple {28239#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 89: Hoare triple {28239#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 90: Hoare triple {28239#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {28239#false} is VALID [2018-11-23 12:48:04,633 INFO L273 TraceCheckUtils]: 91: Hoare triple {28239#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {28239#false} is VALID [2018-11-23 12:48:04,634 INFO L273 TraceCheckUtils]: 92: Hoare triple {28239#false} assume 8 == ~blastFlag~0; {28239#false} is VALID [2018-11-23 12:48:04,634 INFO L273 TraceCheckUtils]: 93: Hoare triple {28239#false} assume !false; {28239#false} is VALID [2018-11-23 12:48:04,639 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:04,640 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:04,640 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:04,640 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:04,640 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:04,640 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:04,725 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:04,725 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:04,725 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:04,726 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:04,726 INFO L87 Difference]: Start difference. First operand 260 states and 392 transitions. Second operand 4 states. [2018-11-23 12:48:06,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:06,041 INFO L93 Difference]: Finished difference Result 541 states and 816 transitions. [2018-11-23 12:48:06,041 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:06,042 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:06,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:06,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:06,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 540 transitions. [2018-11-23 12:48:06,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:06,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 540 transitions. [2018-11-23 12:48:06,048 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 540 transitions. [2018-11-23 12:48:06,574 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 540 edges. 540 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:06,581 INFO L225 Difference]: With dead ends: 541 [2018-11-23 12:48:06,581 INFO L226 Difference]: Without dead ends: 306 [2018-11-23 12:48:06,582 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:06,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2018-11-23 12:48:06,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 260. [2018-11-23 12:48:06,681 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:06,681 INFO L82 GeneralOperation]: Start isEquivalent. First operand 306 states. Second operand 260 states. [2018-11-23 12:48:06,682 INFO L74 IsIncluded]: Start isIncluded. First operand 306 states. Second operand 260 states. [2018-11-23 12:48:06,682 INFO L87 Difference]: Start difference. First operand 306 states. Second operand 260 states. [2018-11-23 12:48:06,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:06,688 INFO L93 Difference]: Finished difference Result 306 states and 451 transitions. [2018-11-23 12:48:06,688 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 451 transitions. [2018-11-23 12:48:06,689 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:06,689 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:06,689 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 306 states. [2018-11-23 12:48:06,689 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 306 states. [2018-11-23 12:48:06,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:06,696 INFO L93 Difference]: Finished difference Result 306 states and 451 transitions. [2018-11-23 12:48:06,696 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 451 transitions. [2018-11-23 12:48:06,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:06,697 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:06,697 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:06,697 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:06,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:06,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 391 transitions. [2018-11-23 12:48:06,701 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 391 transitions. Word has length 94 [2018-11-23 12:48:06,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:06,701 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 391 transitions. [2018-11-23 12:48:06,702 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:06,702 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 391 transitions. [2018-11-23 12:48:06,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:06,702 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:06,702 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:06,702 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:06,703 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:06,703 INFO L82 PathProgramCache]: Analyzing trace with hash 1503332932, now seen corresponding path program 1 times [2018-11-23 12:48:06,703 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:06,703 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:06,704 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:06,704 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:06,704 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:06,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:07,006 WARN L180 SmtUtils]: Spent 107.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 12:48:07,481 INFO L256 TraceCheckUtils]: 0: Hoare triple {29782#true} call ULTIMATE.init(); {29782#true} is VALID [2018-11-23 12:48:07,481 INFO L273 TraceCheckUtils]: 1: Hoare triple {29782#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,481 INFO L273 TraceCheckUtils]: 2: Hoare triple {29782#true} assume true; {29782#true} is VALID [2018-11-23 12:48:07,481 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {29782#true} {29782#true} #632#return; {29782#true} is VALID [2018-11-23 12:48:07,481 INFO L256 TraceCheckUtils]: 4: Hoare triple {29782#true} call #t~ret138 := main(); {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 5: Hoare triple {29782#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L256 TraceCheckUtils]: 6: Hoare triple {29782#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 7: Hoare triple {29782#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 8: Hoare triple {29782#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 9: Hoare triple {29782#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 10: Hoare triple {29782#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 11: Hoare triple {29782#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,482 INFO L273 TraceCheckUtils]: 12: Hoare triple {29782#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 13: Hoare triple {29782#true} assume !false; {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 14: Hoare triple {29782#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 15: Hoare triple {29782#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 16: Hoare triple {29782#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 17: Hoare triple {29782#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 18: Hoare triple {29782#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 19: Hoare triple {29782#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 20: Hoare triple {29782#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,483 INFO L273 TraceCheckUtils]: 21: Hoare triple {29782#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 22: Hoare triple {29782#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 23: Hoare triple {29782#true} assume 8464 == #t~mem32;havoc #t~mem32; {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 24: Hoare triple {29782#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 25: Hoare triple {29782#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 26: Hoare triple {29782#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 27: Hoare triple {29782#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 28: Hoare triple {29782#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 29: Hoare triple {29782#true} ~skip~0 := 0; {29782#true} is VALID [2018-11-23 12:48:07,484 INFO L273 TraceCheckUtils]: 30: Hoare triple {29782#true} assume !false; {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 31: Hoare triple {29782#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 32: Hoare triple {29782#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 33: Hoare triple {29782#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 34: Hoare triple {29782#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 35: Hoare triple {29782#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 36: Hoare triple {29782#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 37: Hoare triple {29782#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 38: Hoare triple {29782#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,485 INFO L273 TraceCheckUtils]: 39: Hoare triple {29782#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 40: Hoare triple {29782#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 41: Hoare triple {29782#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 42: Hoare triple {29782#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 43: Hoare triple {29782#true} assume 8496 == #t~mem35;havoc #t~mem35; {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 44: Hoare triple {29782#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 45: Hoare triple {29782#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {29782#true} is VALID [2018-11-23 12:48:07,486 INFO L273 TraceCheckUtils]: 46: Hoare triple {29782#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {29782#true} is VALID [2018-11-23 12:48:07,487 INFO L273 TraceCheckUtils]: 47: Hoare triple {29782#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,489 INFO L273 TraceCheckUtils]: 48: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,489 INFO L273 TraceCheckUtils]: 49: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,491 INFO L273 TraceCheckUtils]: 50: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,491 INFO L273 TraceCheckUtils]: 51: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,493 INFO L273 TraceCheckUtils]: 52: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,493 INFO L273 TraceCheckUtils]: 53: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,493 INFO L273 TraceCheckUtils]: 54: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,495 INFO L273 TraceCheckUtils]: 55: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,497 INFO L273 TraceCheckUtils]: 56: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,497 INFO L273 TraceCheckUtils]: 57: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,497 INFO L273 TraceCheckUtils]: 58: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,498 INFO L273 TraceCheckUtils]: 59: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:07,498 INFO L273 TraceCheckUtils]: 60: Hoare triple {29784#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29785#(= 8656 |ssl3_accept_#t~mem31|)} is VALID [2018-11-23 12:48:07,498 INFO L273 TraceCheckUtils]: 61: Hoare triple {29785#(= 8656 |ssl3_accept_#t~mem31|)} assume 8482 == #t~mem31;havoc #t~mem31; {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 62: Hoare triple {29783#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 63: Hoare triple {29783#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 64: Hoare triple {29783#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 65: Hoare triple {29783#false} ~skip~0 := 0; {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 66: Hoare triple {29783#false} assume !false; {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 67: Hoare triple {29783#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 68: Hoare triple {29783#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 69: Hoare triple {29783#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,499 INFO L273 TraceCheckUtils]: 70: Hoare triple {29783#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 71: Hoare triple {29783#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 72: Hoare triple {29783#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 73: Hoare triple {29783#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 74: Hoare triple {29783#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 75: Hoare triple {29783#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 76: Hoare triple {29783#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 77: Hoare triple {29783#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 78: Hoare triple {29783#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,500 INFO L273 TraceCheckUtils]: 79: Hoare triple {29783#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 80: Hoare triple {29783#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 81: Hoare triple {29783#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 82: Hoare triple {29783#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 83: Hoare triple {29783#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 84: Hoare triple {29783#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 85: Hoare triple {29783#false} assume 8544 == #t~mem41;havoc #t~mem41; {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 86: Hoare triple {29783#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 87: Hoare triple {29783#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,501 INFO L273 TraceCheckUtils]: 88: Hoare triple {29783#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {29783#false} is VALID [2018-11-23 12:48:07,502 INFO L273 TraceCheckUtils]: 89: Hoare triple {29783#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {29783#false} is VALID [2018-11-23 12:48:07,502 INFO L273 TraceCheckUtils]: 90: Hoare triple {29783#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {29783#false} is VALID [2018-11-23 12:48:07,502 INFO L273 TraceCheckUtils]: 91: Hoare triple {29783#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {29783#false} is VALID [2018-11-23 12:48:07,502 INFO L273 TraceCheckUtils]: 92: Hoare triple {29783#false} assume 8 == ~blastFlag~0; {29783#false} is VALID [2018-11-23 12:48:07,502 INFO L273 TraceCheckUtils]: 93: Hoare triple {29783#false} assume !false; {29783#false} is VALID [2018-11-23 12:48:07,508 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:07,508 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:07,508 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:07,508 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:07,509 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:07,509 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:07,589 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:07,589 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:07,590 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:07,590 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:07,590 INFO L87 Difference]: Start difference. First operand 260 states and 391 transitions. Second operand 4 states. [2018-11-23 12:48:08,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:08,929 INFO L93 Difference]: Finished difference Result 540 states and 813 transitions. [2018-11-23 12:48:08,929 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:08,929 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:08,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:08,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:08,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:48:08,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:08,934 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:48:08,934 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 538 transitions. [2018-11-23 12:48:09,452 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 538 edges. 538 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:09,459 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:09,459 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:09,459 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:09,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:09,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:09,604 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:09,604 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:09,604 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:09,604 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:09,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:09,610 INFO L93 Difference]: Finished difference Result 305 states and 449 transitions. [2018-11-23 12:48:09,611 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 449 transitions. [2018-11-23 12:48:09,611 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:09,611 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:09,611 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:09,611 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:09,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:09,617 INFO L93 Difference]: Finished difference Result 305 states and 449 transitions. [2018-11-23 12:48:09,617 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 449 transitions. [2018-11-23 12:48:09,617 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:09,617 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:09,617 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:09,617 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:09,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:09,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 390 transitions. [2018-11-23 12:48:09,623 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 390 transitions. Word has length 94 [2018-11-23 12:48:09,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:09,623 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 390 transitions. [2018-11-23 12:48:09,623 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:09,624 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 390 transitions. [2018-11-23 12:48:09,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:09,624 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:09,625 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:09,625 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:09,625 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:09,625 INFO L82 PathProgramCache]: Analyzing trace with hash -1501191291, now seen corresponding path program 1 times [2018-11-23 12:48:09,625 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:09,625 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:09,626 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:09,626 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:09,627 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:09,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:10,124 INFO L256 TraceCheckUtils]: 0: Hoare triple {31322#true} call ULTIMATE.init(); {31322#true} is VALID [2018-11-23 12:48:10,124 INFO L273 TraceCheckUtils]: 1: Hoare triple {31322#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,124 INFO L273 TraceCheckUtils]: 2: Hoare triple {31322#true} assume true; {31322#true} is VALID [2018-11-23 12:48:10,125 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {31322#true} {31322#true} #632#return; {31322#true} is VALID [2018-11-23 12:48:10,125 INFO L256 TraceCheckUtils]: 4: Hoare triple {31322#true} call #t~ret138 := main(); {31322#true} is VALID [2018-11-23 12:48:10,125 INFO L273 TraceCheckUtils]: 5: Hoare triple {31322#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,125 INFO L256 TraceCheckUtils]: 6: Hoare triple {31322#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {31322#true} is VALID [2018-11-23 12:48:10,125 INFO L273 TraceCheckUtils]: 7: Hoare triple {31322#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 8: Hoare triple {31322#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 9: Hoare triple {31322#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 10: Hoare triple {31322#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 11: Hoare triple {31322#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 12: Hoare triple {31322#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 13: Hoare triple {31322#true} assume !false; {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 14: Hoare triple {31322#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,126 INFO L273 TraceCheckUtils]: 15: Hoare triple {31322#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 16: Hoare triple {31322#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 17: Hoare triple {31322#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 18: Hoare triple {31322#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 19: Hoare triple {31322#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 20: Hoare triple {31322#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 21: Hoare triple {31322#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 22: Hoare triple {31322#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 23: Hoare triple {31322#true} assume 8464 == #t~mem32;havoc #t~mem32; {31322#true} is VALID [2018-11-23 12:48:10,127 INFO L273 TraceCheckUtils]: 24: Hoare triple {31322#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 25: Hoare triple {31322#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 26: Hoare triple {31322#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 27: Hoare triple {31322#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 28: Hoare triple {31322#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 29: Hoare triple {31322#true} ~skip~0 := 0; {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 30: Hoare triple {31322#true} assume !false; {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 31: Hoare triple {31322#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,128 INFO L273 TraceCheckUtils]: 32: Hoare triple {31322#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 33: Hoare triple {31322#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 34: Hoare triple {31322#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 35: Hoare triple {31322#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 36: Hoare triple {31322#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 37: Hoare triple {31322#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 38: Hoare triple {31322#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 39: Hoare triple {31322#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 40: Hoare triple {31322#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,129 INFO L273 TraceCheckUtils]: 41: Hoare triple {31322#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,130 INFO L273 TraceCheckUtils]: 42: Hoare triple {31322#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,130 INFO L273 TraceCheckUtils]: 43: Hoare triple {31322#true} assume 8496 == #t~mem35;havoc #t~mem35; {31322#true} is VALID [2018-11-23 12:48:10,130 INFO L273 TraceCheckUtils]: 44: Hoare triple {31322#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {31322#true} is VALID [2018-11-23 12:48:10,130 INFO L273 TraceCheckUtils]: 45: Hoare triple {31322#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {31322#true} is VALID [2018-11-23 12:48:10,130 INFO L273 TraceCheckUtils]: 46: Hoare triple {31322#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {31322#true} is VALID [2018-11-23 12:48:10,131 INFO L273 TraceCheckUtils]: 47: Hoare triple {31322#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,132 INFO L273 TraceCheckUtils]: 48: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,132 INFO L273 TraceCheckUtils]: 49: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,132 INFO L273 TraceCheckUtils]: 50: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,133 INFO L273 TraceCheckUtils]: 51: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,133 INFO L273 TraceCheckUtils]: 52: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,133 INFO L273 TraceCheckUtils]: 53: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,133 INFO L273 TraceCheckUtils]: 54: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,134 INFO L273 TraceCheckUtils]: 55: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,134 INFO L273 TraceCheckUtils]: 56: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,135 INFO L273 TraceCheckUtils]: 57: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,135 INFO L273 TraceCheckUtils]: 58: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:10,136 INFO L273 TraceCheckUtils]: 59: Hoare triple {31324#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31325#(= 8512 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:48:10,137 INFO L273 TraceCheckUtils]: 60: Hoare triple {31325#(= 8512 |ssl3_accept_#t~mem30|)} assume 8481 == #t~mem30;havoc #t~mem30; {31323#false} is VALID [2018-11-23 12:48:10,137 INFO L273 TraceCheckUtils]: 61: Hoare triple {31323#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {31323#false} is VALID [2018-11-23 12:48:10,137 INFO L273 TraceCheckUtils]: 62: Hoare triple {31323#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,137 INFO L273 TraceCheckUtils]: 63: Hoare triple {31323#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,137 INFO L273 TraceCheckUtils]: 64: Hoare triple {31323#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {31323#false} is VALID [2018-11-23 12:48:10,138 INFO L273 TraceCheckUtils]: 65: Hoare triple {31323#false} ~skip~0 := 0; {31323#false} is VALID [2018-11-23 12:48:10,138 INFO L273 TraceCheckUtils]: 66: Hoare triple {31323#false} assume !false; {31323#false} is VALID [2018-11-23 12:48:10,138 INFO L273 TraceCheckUtils]: 67: Hoare triple {31323#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,138 INFO L273 TraceCheckUtils]: 68: Hoare triple {31323#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,138 INFO L273 TraceCheckUtils]: 69: Hoare triple {31323#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,139 INFO L273 TraceCheckUtils]: 70: Hoare triple {31323#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,139 INFO L273 TraceCheckUtils]: 71: Hoare triple {31323#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,139 INFO L273 TraceCheckUtils]: 72: Hoare triple {31323#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,139 INFO L273 TraceCheckUtils]: 73: Hoare triple {31323#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,139 INFO L273 TraceCheckUtils]: 74: Hoare triple {31323#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 75: Hoare triple {31323#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 76: Hoare triple {31323#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 77: Hoare triple {31323#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 78: Hoare triple {31323#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 79: Hoare triple {31323#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 80: Hoare triple {31323#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 81: Hoare triple {31323#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,140 INFO L273 TraceCheckUtils]: 82: Hoare triple {31323#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 83: Hoare triple {31323#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 84: Hoare triple {31323#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 85: Hoare triple {31323#false} assume 8544 == #t~mem41;havoc #t~mem41; {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 86: Hoare triple {31323#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 87: Hoare triple {31323#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 88: Hoare triple {31323#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 89: Hoare triple {31323#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 90: Hoare triple {31323#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {31323#false} is VALID [2018-11-23 12:48:10,141 INFO L273 TraceCheckUtils]: 91: Hoare triple {31323#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {31323#false} is VALID [2018-11-23 12:48:10,142 INFO L273 TraceCheckUtils]: 92: Hoare triple {31323#false} assume 8 == ~blastFlag~0; {31323#false} is VALID [2018-11-23 12:48:10,142 INFO L273 TraceCheckUtils]: 93: Hoare triple {31323#false} assume !false; {31323#false} is VALID [2018-11-23 12:48:10,147 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:10,147 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:10,148 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:10,148 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:10,148 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:10,148 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:10,228 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:10,229 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:10,229 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:10,229 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:10,229 INFO L87 Difference]: Start difference. First operand 260 states and 390 transitions. Second operand 4 states. [2018-11-23 12:48:11,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:11,473 INFO L93 Difference]: Finished difference Result 518 states and 782 transitions. [2018-11-23 12:48:11,473 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:11,473 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:11,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:11,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:11,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 480 transitions. [2018-11-23 12:48:11,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:11,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 480 transitions. [2018-11-23 12:48:11,477 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 480 transitions. [2018-11-23 12:48:11,976 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 480 edges. 480 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:11,982 INFO L225 Difference]: With dead ends: 518 [2018-11-23 12:48:11,982 INFO L226 Difference]: Without dead ends: 283 [2018-11-23 12:48:11,983 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:11,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2018-11-23 12:48:12,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 260. [2018-11-23 12:48:12,202 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:12,202 INFO L82 GeneralOperation]: Start isEquivalent. First operand 283 states. Second operand 260 states. [2018-11-23 12:48:12,203 INFO L74 IsIncluded]: Start isIncluded. First operand 283 states. Second operand 260 states. [2018-11-23 12:48:12,203 INFO L87 Difference]: Start difference. First operand 283 states. Second operand 260 states. [2018-11-23 12:48:12,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:12,207 INFO L93 Difference]: Finished difference Result 283 states and 419 transitions. [2018-11-23 12:48:12,208 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 419 transitions. [2018-11-23 12:48:12,208 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:12,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:12,208 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 283 states. [2018-11-23 12:48:12,208 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 283 states. [2018-11-23 12:48:12,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:12,214 INFO L93 Difference]: Finished difference Result 283 states and 419 transitions. [2018-11-23 12:48:12,214 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 419 transitions. [2018-11-23 12:48:12,215 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:12,215 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:12,215 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:12,215 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:12,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:12,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 389 transitions. [2018-11-23 12:48:12,221 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 389 transitions. Word has length 94 [2018-11-23 12:48:12,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:12,221 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 389 transitions. [2018-11-23 12:48:12,221 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:12,221 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 389 transitions. [2018-11-23 12:48:12,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:12,222 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:12,222 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:12,223 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:12,223 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:12,223 INFO L82 PathProgramCache]: Analyzing trace with hash 1150244550, now seen corresponding path program 1 times [2018-11-23 12:48:12,223 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:12,223 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:12,224 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:12,224 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:12,224 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:12,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:12,392 INFO L256 TraceCheckUtils]: 0: Hoare triple {32789#true} call ULTIMATE.init(); {32789#true} is VALID [2018-11-23 12:48:12,392 INFO L273 TraceCheckUtils]: 1: Hoare triple {32789#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L273 TraceCheckUtils]: 2: Hoare triple {32789#true} assume true; {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {32789#true} {32789#true} #632#return; {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L256 TraceCheckUtils]: 4: Hoare triple {32789#true} call #t~ret138 := main(); {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L273 TraceCheckUtils]: 5: Hoare triple {32789#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L256 TraceCheckUtils]: 6: Hoare triple {32789#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L273 TraceCheckUtils]: 7: Hoare triple {32789#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,393 INFO L273 TraceCheckUtils]: 8: Hoare triple {32789#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 9: Hoare triple {32789#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 10: Hoare triple {32789#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 11: Hoare triple {32789#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 12: Hoare triple {32789#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 13: Hoare triple {32789#true} assume !false; {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 14: Hoare triple {32789#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 15: Hoare triple {32789#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 16: Hoare triple {32789#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,394 INFO L273 TraceCheckUtils]: 17: Hoare triple {32789#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 18: Hoare triple {32789#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 19: Hoare triple {32789#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 20: Hoare triple {32789#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 21: Hoare triple {32789#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 22: Hoare triple {32789#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 23: Hoare triple {32789#true} assume 8464 == #t~mem32;havoc #t~mem32; {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 24: Hoare triple {32789#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {32789#true} is VALID [2018-11-23 12:48:12,395 INFO L273 TraceCheckUtils]: 25: Hoare triple {32789#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 26: Hoare triple {32789#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 27: Hoare triple {32789#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 28: Hoare triple {32789#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 29: Hoare triple {32789#true} ~skip~0 := 0; {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 30: Hoare triple {32789#true} assume !false; {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 31: Hoare triple {32789#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 32: Hoare triple {32789#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 33: Hoare triple {32789#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,396 INFO L273 TraceCheckUtils]: 34: Hoare triple {32789#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 35: Hoare triple {32789#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 36: Hoare triple {32789#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 37: Hoare triple {32789#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 38: Hoare triple {32789#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 39: Hoare triple {32789#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 40: Hoare triple {32789#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 41: Hoare triple {32789#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 42: Hoare triple {32789#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,397 INFO L273 TraceCheckUtils]: 43: Hoare triple {32789#true} assume 8496 == #t~mem35;havoc #t~mem35; {32789#true} is VALID [2018-11-23 12:48:12,398 INFO L273 TraceCheckUtils]: 44: Hoare triple {32789#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {32789#true} is VALID [2018-11-23 12:48:12,398 INFO L273 TraceCheckUtils]: 45: Hoare triple {32789#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {32789#true} is VALID [2018-11-23 12:48:12,398 INFO L273 TraceCheckUtils]: 46: Hoare triple {32789#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {32789#true} is VALID [2018-11-23 12:48:12,399 INFO L273 TraceCheckUtils]: 47: Hoare triple {32789#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,399 INFO L273 TraceCheckUtils]: 48: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,403 INFO L273 TraceCheckUtils]: 49: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,403 INFO L273 TraceCheckUtils]: 50: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,403 INFO L273 TraceCheckUtils]: 51: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,404 INFO L273 TraceCheckUtils]: 52: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,404 INFO L273 TraceCheckUtils]: 53: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,404 INFO L273 TraceCheckUtils]: 54: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,405 INFO L273 TraceCheckUtils]: 55: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,405 INFO L273 TraceCheckUtils]: 56: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,405 INFO L273 TraceCheckUtils]: 57: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,405 INFO L273 TraceCheckUtils]: 58: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,406 INFO L273 TraceCheckUtils]: 59: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:12,406 INFO L273 TraceCheckUtils]: 60: Hoare triple {32791#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32792#(= 8512 |ssl3_accept_#t~mem31|)} is VALID [2018-11-23 12:48:12,407 INFO L273 TraceCheckUtils]: 61: Hoare triple {32792#(= 8512 |ssl3_accept_#t~mem31|)} assume 8482 == #t~mem31;havoc #t~mem31; {32790#false} is VALID [2018-11-23 12:48:12,407 INFO L273 TraceCheckUtils]: 62: Hoare triple {32790#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,407 INFO L273 TraceCheckUtils]: 63: Hoare triple {32790#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,407 INFO L273 TraceCheckUtils]: 64: Hoare triple {32790#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {32790#false} is VALID [2018-11-23 12:48:12,407 INFO L273 TraceCheckUtils]: 65: Hoare triple {32790#false} ~skip~0 := 0; {32790#false} is VALID [2018-11-23 12:48:12,407 INFO L273 TraceCheckUtils]: 66: Hoare triple {32790#false} assume !false; {32790#false} is VALID [2018-11-23 12:48:12,408 INFO L273 TraceCheckUtils]: 67: Hoare triple {32790#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,408 INFO L273 TraceCheckUtils]: 68: Hoare triple {32790#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,408 INFO L273 TraceCheckUtils]: 69: Hoare triple {32790#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,408 INFO L273 TraceCheckUtils]: 70: Hoare triple {32790#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,408 INFO L273 TraceCheckUtils]: 71: Hoare triple {32790#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,409 INFO L273 TraceCheckUtils]: 72: Hoare triple {32790#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,409 INFO L273 TraceCheckUtils]: 73: Hoare triple {32790#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,409 INFO L273 TraceCheckUtils]: 74: Hoare triple {32790#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,409 INFO L273 TraceCheckUtils]: 75: Hoare triple {32790#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,409 INFO L273 TraceCheckUtils]: 76: Hoare triple {32790#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 77: Hoare triple {32790#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 78: Hoare triple {32790#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 79: Hoare triple {32790#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 80: Hoare triple {32790#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 81: Hoare triple {32790#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 82: Hoare triple {32790#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,410 INFO L273 TraceCheckUtils]: 83: Hoare triple {32790#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 84: Hoare triple {32790#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 85: Hoare triple {32790#false} assume 8544 == #t~mem41;havoc #t~mem41; {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 86: Hoare triple {32790#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 87: Hoare triple {32790#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 88: Hoare triple {32790#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 89: Hoare triple {32790#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 90: Hoare triple {32790#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 91: Hoare triple {32790#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {32790#false} is VALID [2018-11-23 12:48:12,411 INFO L273 TraceCheckUtils]: 92: Hoare triple {32790#false} assume 8 == ~blastFlag~0; {32790#false} is VALID [2018-11-23 12:48:12,412 INFO L273 TraceCheckUtils]: 93: Hoare triple {32790#false} assume !false; {32790#false} is VALID [2018-11-23 12:48:12,417 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:12,418 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:12,418 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:12,418 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:12,418 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:12,419 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:12,499 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:12,499 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:12,499 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:12,500 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:12,500 INFO L87 Difference]: Start difference. First operand 260 states and 389 transitions. Second operand 4 states. [2018-11-23 12:48:13,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:13,677 INFO L93 Difference]: Finished difference Result 517 states and 779 transitions. [2018-11-23 12:48:13,677 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:13,677 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:13,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:13,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:13,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-23 12:48:13,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:13,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-23 12:48:13,681 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 478 transitions. [2018-11-23 12:48:14,133 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 478 edges. 478 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:14,140 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:14,140 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:14,141 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:14,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:14,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:14,238 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:14,238 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:14,239 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:14,239 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:14,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:14,244 INFO L93 Difference]: Finished difference Result 282 states and 417 transitions. [2018-11-23 12:48:14,244 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 417 transitions. [2018-11-23 12:48:14,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:14,245 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:14,245 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:14,245 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:14,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:14,249 INFO L93 Difference]: Finished difference Result 282 states and 417 transitions. [2018-11-23 12:48:14,250 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 417 transitions. [2018-11-23 12:48:14,250 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:14,250 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:14,250 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:14,250 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:14,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:14,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 388 transitions. [2018-11-23 12:48:14,255 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 388 transitions. Word has length 94 [2018-11-23 12:48:14,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:14,255 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 388 transitions. [2018-11-23 12:48:14,255 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:14,255 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 388 transitions. [2018-11-23 12:48:14,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 12:48:14,256 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:14,256 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:14,256 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:14,256 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:14,256 INFO L82 PathProgramCache]: Analyzing trace with hash 961886001, now seen corresponding path program 1 times [2018-11-23 12:48:14,256 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:14,256 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:14,257 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:14,257 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:14,258 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:14,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:14,467 INFO L256 TraceCheckUtils]: 0: Hoare triple {34252#true} call ULTIMATE.init(); {34252#true} is VALID [2018-11-23 12:48:14,467 INFO L273 TraceCheckUtils]: 1: Hoare triple {34252#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,467 INFO L273 TraceCheckUtils]: 2: Hoare triple {34252#true} assume true; {34252#true} is VALID [2018-11-23 12:48:14,468 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {34252#true} {34252#true} #632#return; {34252#true} is VALID [2018-11-23 12:48:14,468 INFO L256 TraceCheckUtils]: 4: Hoare triple {34252#true} call #t~ret138 := main(); {34252#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 5: Hoare triple {34252#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,468 INFO L256 TraceCheckUtils]: 6: Hoare triple {34252#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {34252#true} is VALID [2018-11-23 12:48:14,468 INFO L273 TraceCheckUtils]: 7: Hoare triple {34252#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 8: Hoare triple {34252#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {34252#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 9: Hoare triple {34252#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {34252#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 10: Hoare triple {34252#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {34252#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 11: Hoare triple {34252#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,469 INFO L273 TraceCheckUtils]: 12: Hoare triple {34252#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 13: Hoare triple {34252#true} assume !false; {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 14: Hoare triple {34252#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 15: Hoare triple {34252#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 16: Hoare triple {34252#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 17: Hoare triple {34252#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 18: Hoare triple {34252#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,470 INFO L273 TraceCheckUtils]: 19: Hoare triple {34252#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 20: Hoare triple {34252#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 21: Hoare triple {34252#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 22: Hoare triple {34252#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 23: Hoare triple {34252#true} assume 8464 == #t~mem32;havoc #t~mem32; {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 24: Hoare triple {34252#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 25: Hoare triple {34252#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 26: Hoare triple {34252#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 27: Hoare triple {34252#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,471 INFO L273 TraceCheckUtils]: 28: Hoare triple {34252#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 29: Hoare triple {34252#true} ~skip~0 := 0; {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 30: Hoare triple {34252#true} assume !false; {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 31: Hoare triple {34252#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 32: Hoare triple {34252#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 33: Hoare triple {34252#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 34: Hoare triple {34252#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 35: Hoare triple {34252#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,472 INFO L273 TraceCheckUtils]: 36: Hoare triple {34252#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 37: Hoare triple {34252#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 38: Hoare triple {34252#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 39: Hoare triple {34252#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 40: Hoare triple {34252#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 41: Hoare triple {34252#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 42: Hoare triple {34252#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 43: Hoare triple {34252#true} assume 8496 == #t~mem35;havoc #t~mem35; {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 44: Hoare triple {34252#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {34252#true} is VALID [2018-11-23 12:48:14,473 INFO L273 TraceCheckUtils]: 45: Hoare triple {34252#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {34252#true} is VALID [2018-11-23 12:48:14,474 INFO L273 TraceCheckUtils]: 46: Hoare triple {34252#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {34252#true} is VALID [2018-11-23 12:48:14,474 INFO L273 TraceCheckUtils]: 47: Hoare triple {34252#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,475 INFO L273 TraceCheckUtils]: 48: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,475 INFO L273 TraceCheckUtils]: 49: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,476 INFO L273 TraceCheckUtils]: 50: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,476 INFO L273 TraceCheckUtils]: 51: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} ~skip~0 := 0; {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,476 INFO L273 TraceCheckUtils]: 52: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !false; {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,477 INFO L273 TraceCheckUtils]: 53: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:14,477 INFO L273 TraceCheckUtils]: 54: Hoare triple {34254#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34255#(= |ssl3_accept_#t~mem25| 8656)} is VALID [2018-11-23 12:48:14,477 INFO L273 TraceCheckUtils]: 55: Hoare triple {34255#(= |ssl3_accept_#t~mem25| 8656)} assume 16384 == #t~mem25;havoc #t~mem25; {34253#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 56: Hoare triple {34253#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 57: Hoare triple {34253#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {34253#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 58: Hoare triple {34253#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 59: Hoare triple {34253#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 60: Hoare triple {34253#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {34253#false} is VALID [2018-11-23 12:48:14,478 INFO L273 TraceCheckUtils]: 61: Hoare triple {34253#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 62: Hoare triple {34253#false} assume 12292 != #t~mem62;havoc #t~mem62; {34253#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 63: Hoare triple {34253#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {34253#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 64: Hoare triple {34253#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 65: Hoare triple {34253#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {34253#false} is VALID [2018-11-23 12:48:14,479 INFO L273 TraceCheckUtils]: 66: Hoare triple {34253#false} ~skip~0 := 0; {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 67: Hoare triple {34253#false} assume !false; {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 68: Hoare triple {34253#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 69: Hoare triple {34253#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 70: Hoare triple {34253#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 71: Hoare triple {34253#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 72: Hoare triple {34253#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 73: Hoare triple {34253#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,480 INFO L273 TraceCheckUtils]: 74: Hoare triple {34253#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 75: Hoare triple {34253#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 76: Hoare triple {34253#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 77: Hoare triple {34253#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 78: Hoare triple {34253#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 79: Hoare triple {34253#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 80: Hoare triple {34253#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 81: Hoare triple {34253#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 82: Hoare triple {34253#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,481 INFO L273 TraceCheckUtils]: 83: Hoare triple {34253#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 84: Hoare triple {34253#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 85: Hoare triple {34253#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 86: Hoare triple {34253#false} assume 8544 == #t~mem41;havoc #t~mem41; {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 87: Hoare triple {34253#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 88: Hoare triple {34253#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 89: Hoare triple {34253#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 90: Hoare triple {34253#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {34253#false} is VALID [2018-11-23 12:48:14,482 INFO L273 TraceCheckUtils]: 91: Hoare triple {34253#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {34253#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 92: Hoare triple {34253#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {34253#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 93: Hoare triple {34253#false} assume 8 == ~blastFlag~0; {34253#false} is VALID [2018-11-23 12:48:14,483 INFO L273 TraceCheckUtils]: 94: Hoare triple {34253#false} assume !false; {34253#false} is VALID [2018-11-23 12:48:14,487 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:14,488 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:14,488 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:14,488 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:14,488 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:14,489 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:14,570 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:14,570 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:14,570 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:14,571 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:14,571 INFO L87 Difference]: Start difference. First operand 260 states and 388 transitions. Second operand 4 states. [2018-11-23 12:48:15,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:15,933 INFO L93 Difference]: Finished difference Result 540 states and 807 transitions. [2018-11-23 12:48:15,933 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:15,933 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:15,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:15,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:15,936 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 537 transitions. [2018-11-23 12:48:15,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:15,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 537 transitions. [2018-11-23 12:48:15,938 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 537 transitions. [2018-11-23 12:48:16,471 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 537 edges. 537 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:16,477 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:16,477 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:16,478 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:16,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:16,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:16,784 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:16,784 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:16,784 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:16,784 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:16,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:16,790 INFO L93 Difference]: Finished difference Result 305 states and 446 transitions. [2018-11-23 12:48:16,790 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 446 transitions. [2018-11-23 12:48:16,790 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:16,790 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:16,791 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:16,791 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:16,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:16,798 INFO L93 Difference]: Finished difference Result 305 states and 446 transitions. [2018-11-23 12:48:16,798 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 446 transitions. [2018-11-23 12:48:16,798 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:16,798 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:16,799 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:16,799 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:16,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:16,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 387 transitions. [2018-11-23 12:48:16,804 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 387 transitions. Word has length 95 [2018-11-23 12:48:16,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:16,805 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 387 transitions. [2018-11-23 12:48:16,805 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:16,805 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 387 transitions. [2018-11-23 12:48:16,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 12:48:16,806 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:16,806 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:16,806 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:16,806 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:16,807 INFO L82 PathProgramCache]: Analyzing trace with hash -1393919249, now seen corresponding path program 1 times [2018-11-23 12:48:16,807 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:16,807 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:16,808 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:16,808 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:16,808 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:16,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:17,079 WARN L180 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 16 DAG size of output: 13 [2018-11-23 12:48:17,324 INFO L256 TraceCheckUtils]: 0: Hoare triple {35792#true} call ULTIMATE.init(); {35792#true} is VALID [2018-11-23 12:48:17,324 INFO L273 TraceCheckUtils]: 1: Hoare triple {35792#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,324 INFO L273 TraceCheckUtils]: 2: Hoare triple {35792#true} assume true; {35792#true} is VALID [2018-11-23 12:48:17,324 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35792#true} {35792#true} #632#return; {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L256 TraceCheckUtils]: 4: Hoare triple {35792#true} call #t~ret138 := main(); {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 5: Hoare triple {35792#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L256 TraceCheckUtils]: 6: Hoare triple {35792#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 7: Hoare triple {35792#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 8: Hoare triple {35792#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 9: Hoare triple {35792#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 10: Hoare triple {35792#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 11: Hoare triple {35792#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,325 INFO L273 TraceCheckUtils]: 12: Hoare triple {35792#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 13: Hoare triple {35792#true} assume !false; {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 14: Hoare triple {35792#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 15: Hoare triple {35792#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 16: Hoare triple {35792#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 17: Hoare triple {35792#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 18: Hoare triple {35792#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 19: Hoare triple {35792#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,326 INFO L273 TraceCheckUtils]: 20: Hoare triple {35792#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 21: Hoare triple {35792#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 22: Hoare triple {35792#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 23: Hoare triple {35792#true} assume 8464 == #t~mem32;havoc #t~mem32; {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 24: Hoare triple {35792#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 25: Hoare triple {35792#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 26: Hoare triple {35792#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 27: Hoare triple {35792#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 28: Hoare triple {35792#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {35792#true} is VALID [2018-11-23 12:48:17,327 INFO L273 TraceCheckUtils]: 29: Hoare triple {35792#true} ~skip~0 := 0; {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 30: Hoare triple {35792#true} assume !false; {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 31: Hoare triple {35792#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 32: Hoare triple {35792#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 33: Hoare triple {35792#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 34: Hoare triple {35792#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 35: Hoare triple {35792#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 36: Hoare triple {35792#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 37: Hoare triple {35792#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,328 INFO L273 TraceCheckUtils]: 38: Hoare triple {35792#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 39: Hoare triple {35792#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 40: Hoare triple {35792#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 41: Hoare triple {35792#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 42: Hoare triple {35792#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 43: Hoare triple {35792#true} assume 8496 == #t~mem35;havoc #t~mem35; {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 44: Hoare triple {35792#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 45: Hoare triple {35792#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {35792#true} is VALID [2018-11-23 12:48:17,329 INFO L273 TraceCheckUtils]: 46: Hoare triple {35792#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {35792#true} is VALID [2018-11-23 12:48:17,331 INFO L273 TraceCheckUtils]: 47: Hoare triple {35792#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,333 INFO L273 TraceCheckUtils]: 48: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,333 INFO L273 TraceCheckUtils]: 49: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,336 INFO L273 TraceCheckUtils]: 50: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,336 INFO L273 TraceCheckUtils]: 51: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} ~skip~0 := 0; {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,339 INFO L273 TraceCheckUtils]: 52: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !false; {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,339 INFO L273 TraceCheckUtils]: 53: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:17,341 INFO L273 TraceCheckUtils]: 54: Hoare triple {35794#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35795#(= |ssl3_accept_#t~mem25| 8512)} is VALID [2018-11-23 12:48:17,341 INFO L273 TraceCheckUtils]: 55: Hoare triple {35795#(= |ssl3_accept_#t~mem25| 8512)} assume 16384 == #t~mem25;havoc #t~mem25; {35793#false} is VALID [2018-11-23 12:48:17,341 INFO L273 TraceCheckUtils]: 56: Hoare triple {35793#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,341 INFO L273 TraceCheckUtils]: 57: Hoare triple {35793#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {35793#false} is VALID [2018-11-23 12:48:17,341 INFO L273 TraceCheckUtils]: 58: Hoare triple {35793#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,341 INFO L273 TraceCheckUtils]: 59: Hoare triple {35793#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 60: Hoare triple {35793#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 61: Hoare triple {35793#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 62: Hoare triple {35793#false} assume 12292 != #t~mem62;havoc #t~mem62; {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 63: Hoare triple {35793#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 64: Hoare triple {35793#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 65: Hoare triple {35793#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 66: Hoare triple {35793#false} ~skip~0 := 0; {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 67: Hoare triple {35793#false} assume !false; {35793#false} is VALID [2018-11-23 12:48:17,342 INFO L273 TraceCheckUtils]: 68: Hoare triple {35793#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 69: Hoare triple {35793#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 70: Hoare triple {35793#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 71: Hoare triple {35793#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 72: Hoare triple {35793#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 73: Hoare triple {35793#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 74: Hoare triple {35793#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 75: Hoare triple {35793#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 76: Hoare triple {35793#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,343 INFO L273 TraceCheckUtils]: 77: Hoare triple {35793#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 78: Hoare triple {35793#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 79: Hoare triple {35793#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 80: Hoare triple {35793#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 81: Hoare triple {35793#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 82: Hoare triple {35793#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 83: Hoare triple {35793#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 84: Hoare triple {35793#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,344 INFO L273 TraceCheckUtils]: 85: Hoare triple {35793#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 86: Hoare triple {35793#false} assume 8544 == #t~mem41;havoc #t~mem41; {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 87: Hoare triple {35793#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 88: Hoare triple {35793#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 89: Hoare triple {35793#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 90: Hoare triple {35793#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 91: Hoare triple {35793#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 92: Hoare triple {35793#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 93: Hoare triple {35793#false} assume 8 == ~blastFlag~0; {35793#false} is VALID [2018-11-23 12:48:17,345 INFO L273 TraceCheckUtils]: 94: Hoare triple {35793#false} assume !false; {35793#false} is VALID [2018-11-23 12:48:17,355 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:17,355 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:17,355 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:17,356 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:17,356 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:17,356 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:17,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:17,454 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:17,454 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:17,454 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:17,454 INFO L87 Difference]: Start difference. First operand 260 states and 387 transitions. Second operand 4 states. [2018-11-23 12:48:18,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:18,688 INFO L93 Difference]: Finished difference Result 517 states and 775 transitions. [2018-11-23 12:48:18,688 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:18,689 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:18,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:18,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:18,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 477 transitions. [2018-11-23 12:48:18,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:18,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 477 transitions. [2018-11-23 12:48:18,693 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 477 transitions. [2018-11-23 12:48:19,160 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 477 edges. 477 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:19,167 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:19,167 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:19,168 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:19,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:19,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:19,339 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:19,339 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:19,339 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:19,339 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:19,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:19,345 INFO L93 Difference]: Finished difference Result 282 states and 415 transitions. [2018-11-23 12:48:19,345 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 415 transitions. [2018-11-23 12:48:19,346 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:19,346 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:19,346 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:19,346 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:19,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:19,351 INFO L93 Difference]: Finished difference Result 282 states and 415 transitions. [2018-11-23 12:48:19,351 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 415 transitions. [2018-11-23 12:48:19,351 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:19,351 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:19,351 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:19,351 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:19,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:19,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 386 transitions. [2018-11-23 12:48:19,355 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 386 transitions. Word has length 95 [2018-11-23 12:48:19,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:19,356 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 386 transitions. [2018-11-23 12:48:19,356 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:19,356 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 386 transitions. [2018-11-23 12:48:19,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 12:48:19,357 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:19,357 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:19,358 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:19,358 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:19,358 INFO L82 PathProgramCache]: Analyzing trace with hash -1152513280, now seen corresponding path program 1 times [2018-11-23 12:48:19,358 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:19,358 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:19,359 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:19,359 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:19,359 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:19,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:19,496 INFO L256 TraceCheckUtils]: 0: Hoare triple {37255#true} call ULTIMATE.init(); {37255#true} is VALID [2018-11-23 12:48:19,496 INFO L273 TraceCheckUtils]: 1: Hoare triple {37255#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,496 INFO L273 TraceCheckUtils]: 2: Hoare triple {37255#true} assume true; {37255#true} is VALID [2018-11-23 12:48:19,497 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37255#true} {37255#true} #632#return; {37255#true} is VALID [2018-11-23 12:48:19,497 INFO L256 TraceCheckUtils]: 4: Hoare triple {37255#true} call #t~ret138 := main(); {37255#true} is VALID [2018-11-23 12:48:19,497 INFO L273 TraceCheckUtils]: 5: Hoare triple {37255#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,497 INFO L256 TraceCheckUtils]: 6: Hoare triple {37255#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {37255#true} is VALID [2018-11-23 12:48:19,497 INFO L273 TraceCheckUtils]: 7: Hoare triple {37255#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 8: Hoare triple {37255#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 9: Hoare triple {37255#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 10: Hoare triple {37255#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 11: Hoare triple {37255#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 12: Hoare triple {37255#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 13: Hoare triple {37255#true} assume !false; {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 14: Hoare triple {37255#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,498 INFO L273 TraceCheckUtils]: 15: Hoare triple {37255#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 16: Hoare triple {37255#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 17: Hoare triple {37255#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 18: Hoare triple {37255#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 19: Hoare triple {37255#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 20: Hoare triple {37255#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 21: Hoare triple {37255#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 22: Hoare triple {37255#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 23: Hoare triple {37255#true} assume 8464 == #t~mem32;havoc #t~mem32; {37255#true} is VALID [2018-11-23 12:48:19,499 INFO L273 TraceCheckUtils]: 24: Hoare triple {37255#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 25: Hoare triple {37255#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 26: Hoare triple {37255#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 27: Hoare triple {37255#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 28: Hoare triple {37255#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 29: Hoare triple {37255#true} ~skip~0 := 0; {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 30: Hoare triple {37255#true} assume !false; {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 31: Hoare triple {37255#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 32: Hoare triple {37255#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,500 INFO L273 TraceCheckUtils]: 33: Hoare triple {37255#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 34: Hoare triple {37255#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 35: Hoare triple {37255#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 36: Hoare triple {37255#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 37: Hoare triple {37255#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 38: Hoare triple {37255#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 39: Hoare triple {37255#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 40: Hoare triple {37255#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 41: Hoare triple {37255#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,501 INFO L273 TraceCheckUtils]: 42: Hoare triple {37255#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,502 INFO L273 TraceCheckUtils]: 43: Hoare triple {37255#true} assume 8496 == #t~mem35;havoc #t~mem35; {37255#true} is VALID [2018-11-23 12:48:19,502 INFO L273 TraceCheckUtils]: 44: Hoare triple {37255#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {37255#true} is VALID [2018-11-23 12:48:19,502 INFO L273 TraceCheckUtils]: 45: Hoare triple {37255#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {37255#true} is VALID [2018-11-23 12:48:19,502 INFO L273 TraceCheckUtils]: 46: Hoare triple {37255#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {37255#true} is VALID [2018-11-23 12:48:19,503 INFO L273 TraceCheckUtils]: 47: Hoare triple {37255#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,504 INFO L273 TraceCheckUtils]: 48: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,504 INFO L273 TraceCheckUtils]: 49: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,504 INFO L273 TraceCheckUtils]: 50: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,504 INFO L273 TraceCheckUtils]: 51: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,505 INFO L273 TraceCheckUtils]: 52: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,505 INFO L273 TraceCheckUtils]: 53: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,505 INFO L273 TraceCheckUtils]: 54: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:19,506 INFO L273 TraceCheckUtils]: 55: Hoare triple {37257#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37258#(= 8656 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:48:19,507 INFO L273 TraceCheckUtils]: 56: Hoare triple {37258#(= 8656 |ssl3_accept_#t~mem26|)} assume 8192 == #t~mem26;havoc #t~mem26; {37256#false} is VALID [2018-11-23 12:48:19,507 INFO L273 TraceCheckUtils]: 57: Hoare triple {37256#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,507 INFO L273 TraceCheckUtils]: 58: Hoare triple {37256#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {37256#false} is VALID [2018-11-23 12:48:19,507 INFO L273 TraceCheckUtils]: 59: Hoare triple {37256#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,508 INFO L273 TraceCheckUtils]: 60: Hoare triple {37256#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,508 INFO L273 TraceCheckUtils]: 61: Hoare triple {37256#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {37256#false} is VALID [2018-11-23 12:48:19,508 INFO L273 TraceCheckUtils]: 62: Hoare triple {37256#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,508 INFO L273 TraceCheckUtils]: 63: Hoare triple {37256#false} assume 12292 != #t~mem62;havoc #t~mem62; {37256#false} is VALID [2018-11-23 12:48:19,508 INFO L273 TraceCheckUtils]: 64: Hoare triple {37256#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {37256#false} is VALID [2018-11-23 12:48:19,509 INFO L273 TraceCheckUtils]: 65: Hoare triple {37256#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,509 INFO L273 TraceCheckUtils]: 66: Hoare triple {37256#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {37256#false} is VALID [2018-11-23 12:48:19,509 INFO L273 TraceCheckUtils]: 67: Hoare triple {37256#false} ~skip~0 := 0; {37256#false} is VALID [2018-11-23 12:48:19,509 INFO L273 TraceCheckUtils]: 68: Hoare triple {37256#false} assume !false; {37256#false} is VALID [2018-11-23 12:48:19,509 INFO L273 TraceCheckUtils]: 69: Hoare triple {37256#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,509 INFO L273 TraceCheckUtils]: 70: Hoare triple {37256#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,510 INFO L273 TraceCheckUtils]: 71: Hoare triple {37256#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,510 INFO L273 TraceCheckUtils]: 72: Hoare triple {37256#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,510 INFO L273 TraceCheckUtils]: 73: Hoare triple {37256#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,510 INFO L273 TraceCheckUtils]: 74: Hoare triple {37256#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,510 INFO L273 TraceCheckUtils]: 75: Hoare triple {37256#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,511 INFO L273 TraceCheckUtils]: 76: Hoare triple {37256#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,511 INFO L273 TraceCheckUtils]: 77: Hoare triple {37256#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,511 INFO L273 TraceCheckUtils]: 78: Hoare triple {37256#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,511 INFO L273 TraceCheckUtils]: 79: Hoare triple {37256#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,511 INFO L273 TraceCheckUtils]: 80: Hoare triple {37256#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 81: Hoare triple {37256#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 82: Hoare triple {37256#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 83: Hoare triple {37256#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 84: Hoare triple {37256#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 85: Hoare triple {37256#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 86: Hoare triple {37256#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 87: Hoare triple {37256#false} assume 8544 == #t~mem41;havoc #t~mem41; {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 88: Hoare triple {37256#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,512 INFO L273 TraceCheckUtils]: 89: Hoare triple {37256#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,513 INFO L273 TraceCheckUtils]: 90: Hoare triple {37256#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {37256#false} is VALID [2018-11-23 12:48:19,513 INFO L273 TraceCheckUtils]: 91: Hoare triple {37256#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {37256#false} is VALID [2018-11-23 12:48:19,513 INFO L273 TraceCheckUtils]: 92: Hoare triple {37256#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {37256#false} is VALID [2018-11-23 12:48:19,513 INFO L273 TraceCheckUtils]: 93: Hoare triple {37256#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {37256#false} is VALID [2018-11-23 12:48:19,513 INFO L273 TraceCheckUtils]: 94: Hoare triple {37256#false} assume 8 == ~blastFlag~0; {37256#false} is VALID [2018-11-23 12:48:19,513 INFO L273 TraceCheckUtils]: 95: Hoare triple {37256#false} assume !false; {37256#false} is VALID [2018-11-23 12:48:19,518 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:19,518 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:19,518 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:19,519 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:19,519 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:19,519 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:19,603 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:19,604 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:19,604 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:19,604 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:19,604 INFO L87 Difference]: Start difference. First operand 260 states and 386 transitions. Second operand 4 states. [2018-11-23 12:48:20,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:20,967 INFO L93 Difference]: Finished difference Result 540 states and 803 transitions. [2018-11-23 12:48:20,967 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:20,967 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:20,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:20,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:20,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 536 transitions. [2018-11-23 12:48:20,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:20,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 536 transitions. [2018-11-23 12:48:20,972 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 536 transitions. [2018-11-23 12:48:21,526 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 536 edges. 536 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:21,533 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:21,533 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:21,534 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:21,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:21,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:21,724 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:21,725 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:21,725 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:21,725 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:21,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:21,731 INFO L93 Difference]: Finished difference Result 305 states and 444 transitions. [2018-11-23 12:48:21,731 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 444 transitions. [2018-11-23 12:48:21,731 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:21,731 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:21,732 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:21,732 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:21,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:21,737 INFO L93 Difference]: Finished difference Result 305 states and 444 transitions. [2018-11-23 12:48:21,737 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 444 transitions. [2018-11-23 12:48:21,737 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:21,737 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:21,737 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:21,737 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:21,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:21,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 385 transitions. [2018-11-23 12:48:21,741 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 385 transitions. Word has length 96 [2018-11-23 12:48:21,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:21,742 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 385 transitions. [2018-11-23 12:48:21,742 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:21,742 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 385 transitions. [2018-11-23 12:48:21,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 12:48:21,742 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:21,742 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:21,743 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:21,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:21,743 INFO L82 PathProgramCache]: Analyzing trace with hash -1168031998, now seen corresponding path program 1 times [2018-11-23 12:48:21,743 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:21,743 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:21,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:21,744 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:21,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:21,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:22,076 INFO L256 TraceCheckUtils]: 0: Hoare triple {38795#true} call ULTIMATE.init(); {38795#true} is VALID [2018-11-23 12:48:22,076 INFO L273 TraceCheckUtils]: 1: Hoare triple {38795#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,076 INFO L273 TraceCheckUtils]: 2: Hoare triple {38795#true} assume true; {38795#true} is VALID [2018-11-23 12:48:22,076 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {38795#true} {38795#true} #632#return; {38795#true} is VALID [2018-11-23 12:48:22,077 INFO L256 TraceCheckUtils]: 4: Hoare triple {38795#true} call #t~ret138 := main(); {38795#true} is VALID [2018-11-23 12:48:22,077 INFO L273 TraceCheckUtils]: 5: Hoare triple {38795#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,077 INFO L256 TraceCheckUtils]: 6: Hoare triple {38795#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {38795#true} is VALID [2018-11-23 12:48:22,077 INFO L273 TraceCheckUtils]: 7: Hoare triple {38795#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,077 INFO L273 TraceCheckUtils]: 8: Hoare triple {38795#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {38795#true} is VALID [2018-11-23 12:48:22,078 INFO L273 TraceCheckUtils]: 9: Hoare triple {38795#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {38795#true} is VALID [2018-11-23 12:48:22,078 INFO L273 TraceCheckUtils]: 10: Hoare triple {38795#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {38795#true} is VALID [2018-11-23 12:48:22,078 INFO L273 TraceCheckUtils]: 11: Hoare triple {38795#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,078 INFO L273 TraceCheckUtils]: 12: Hoare triple {38795#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {38795#true} is VALID [2018-11-23 12:48:22,078 INFO L273 TraceCheckUtils]: 13: Hoare triple {38795#true} assume !false; {38795#true} is VALID [2018-11-23 12:48:22,079 INFO L273 TraceCheckUtils]: 14: Hoare triple {38795#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,079 INFO L273 TraceCheckUtils]: 15: Hoare triple {38795#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,079 INFO L273 TraceCheckUtils]: 16: Hoare triple {38795#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,079 INFO L273 TraceCheckUtils]: 17: Hoare triple {38795#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,079 INFO L273 TraceCheckUtils]: 18: Hoare triple {38795#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,079 INFO L273 TraceCheckUtils]: 19: Hoare triple {38795#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 20: Hoare triple {38795#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 21: Hoare triple {38795#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 22: Hoare triple {38795#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 23: Hoare triple {38795#true} assume 8464 == #t~mem32;havoc #t~mem32; {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 24: Hoare triple {38795#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 25: Hoare triple {38795#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 26: Hoare triple {38795#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,080 INFO L273 TraceCheckUtils]: 27: Hoare triple {38795#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 28: Hoare triple {38795#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 29: Hoare triple {38795#true} ~skip~0 := 0; {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 30: Hoare triple {38795#true} assume !false; {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 31: Hoare triple {38795#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 32: Hoare triple {38795#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 33: Hoare triple {38795#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 34: Hoare triple {38795#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 35: Hoare triple {38795#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,081 INFO L273 TraceCheckUtils]: 36: Hoare triple {38795#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 37: Hoare triple {38795#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 38: Hoare triple {38795#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 39: Hoare triple {38795#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 40: Hoare triple {38795#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 41: Hoare triple {38795#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 42: Hoare triple {38795#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 43: Hoare triple {38795#true} assume 8496 == #t~mem35;havoc #t~mem35; {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 44: Hoare triple {38795#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {38795#true} is VALID [2018-11-23 12:48:22,082 INFO L273 TraceCheckUtils]: 45: Hoare triple {38795#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {38795#true} is VALID [2018-11-23 12:48:22,083 INFO L273 TraceCheckUtils]: 46: Hoare triple {38795#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {38795#true} is VALID [2018-11-23 12:48:22,083 INFO L273 TraceCheckUtils]: 47: Hoare triple {38795#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,084 INFO L273 TraceCheckUtils]: 48: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,084 INFO L273 TraceCheckUtils]: 49: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,085 INFO L273 TraceCheckUtils]: 50: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,085 INFO L273 TraceCheckUtils]: 51: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,085 INFO L273 TraceCheckUtils]: 52: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,086 INFO L273 TraceCheckUtils]: 53: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,086 INFO L273 TraceCheckUtils]: 54: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:22,087 INFO L273 TraceCheckUtils]: 55: Hoare triple {38797#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38798#(= 8512 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:48:22,087 INFO L273 TraceCheckUtils]: 56: Hoare triple {38798#(= 8512 |ssl3_accept_#t~mem26|)} assume 8192 == #t~mem26;havoc #t~mem26; {38796#false} is VALID [2018-11-23 12:48:22,087 INFO L273 TraceCheckUtils]: 57: Hoare triple {38796#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,088 INFO L273 TraceCheckUtils]: 58: Hoare triple {38796#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {38796#false} is VALID [2018-11-23 12:48:22,088 INFO L273 TraceCheckUtils]: 59: Hoare triple {38796#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,088 INFO L273 TraceCheckUtils]: 60: Hoare triple {38796#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,088 INFO L273 TraceCheckUtils]: 61: Hoare triple {38796#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {38796#false} is VALID [2018-11-23 12:48:22,088 INFO L273 TraceCheckUtils]: 62: Hoare triple {38796#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,089 INFO L273 TraceCheckUtils]: 63: Hoare triple {38796#false} assume 12292 != #t~mem62;havoc #t~mem62; {38796#false} is VALID [2018-11-23 12:48:22,089 INFO L273 TraceCheckUtils]: 64: Hoare triple {38796#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {38796#false} is VALID [2018-11-23 12:48:22,089 INFO L273 TraceCheckUtils]: 65: Hoare triple {38796#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,089 INFO L273 TraceCheckUtils]: 66: Hoare triple {38796#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {38796#false} is VALID [2018-11-23 12:48:22,089 INFO L273 TraceCheckUtils]: 67: Hoare triple {38796#false} ~skip~0 := 0; {38796#false} is VALID [2018-11-23 12:48:22,090 INFO L273 TraceCheckUtils]: 68: Hoare triple {38796#false} assume !false; {38796#false} is VALID [2018-11-23 12:48:22,090 INFO L273 TraceCheckUtils]: 69: Hoare triple {38796#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,090 INFO L273 TraceCheckUtils]: 70: Hoare triple {38796#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,090 INFO L273 TraceCheckUtils]: 71: Hoare triple {38796#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,090 INFO L273 TraceCheckUtils]: 72: Hoare triple {38796#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,090 INFO L273 TraceCheckUtils]: 73: Hoare triple {38796#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 74: Hoare triple {38796#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 75: Hoare triple {38796#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 76: Hoare triple {38796#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 77: Hoare triple {38796#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 78: Hoare triple {38796#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 79: Hoare triple {38796#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 80: Hoare triple {38796#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 81: Hoare triple {38796#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,091 INFO L273 TraceCheckUtils]: 82: Hoare triple {38796#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 83: Hoare triple {38796#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 84: Hoare triple {38796#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 85: Hoare triple {38796#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 86: Hoare triple {38796#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 87: Hoare triple {38796#false} assume 8544 == #t~mem41;havoc #t~mem41; {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 88: Hoare triple {38796#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 89: Hoare triple {38796#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,092 INFO L273 TraceCheckUtils]: 90: Hoare triple {38796#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {38796#false} is VALID [2018-11-23 12:48:22,093 INFO L273 TraceCheckUtils]: 91: Hoare triple {38796#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {38796#false} is VALID [2018-11-23 12:48:22,093 INFO L273 TraceCheckUtils]: 92: Hoare triple {38796#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {38796#false} is VALID [2018-11-23 12:48:22,093 INFO L273 TraceCheckUtils]: 93: Hoare triple {38796#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {38796#false} is VALID [2018-11-23 12:48:22,093 INFO L273 TraceCheckUtils]: 94: Hoare triple {38796#false} assume 8 == ~blastFlag~0; {38796#false} is VALID [2018-11-23 12:48:22,093 INFO L273 TraceCheckUtils]: 95: Hoare triple {38796#false} assume !false; {38796#false} is VALID [2018-11-23 12:48:22,098 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:22,098 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:22,098 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:22,098 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:22,099 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:22,099 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:22,211 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:22,211 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:22,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:22,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:22,212 INFO L87 Difference]: Start difference. First operand 260 states and 385 transitions. Second operand 4 states. [2018-11-23 12:48:23,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:23,594 INFO L93 Difference]: Finished difference Result 517 states and 771 transitions. [2018-11-23 12:48:23,594 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:23,595 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:23,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:23,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:23,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 12:48:23,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:23,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 12:48:23,599 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 476 transitions. [2018-11-23 12:48:24,083 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 476 edges. 476 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:24,090 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:24,090 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:24,091 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:24,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:24,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:24,246 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:24,246 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:24,246 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:24,247 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:24,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:24,252 INFO L93 Difference]: Finished difference Result 282 states and 413 transitions. [2018-11-23 12:48:24,252 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 413 transitions. [2018-11-23 12:48:24,252 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:24,252 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:24,253 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:24,253 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:24,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:24,257 INFO L93 Difference]: Finished difference Result 282 states and 413 transitions. [2018-11-23 12:48:24,257 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 413 transitions. [2018-11-23 12:48:24,258 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:24,258 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:24,258 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:24,258 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:24,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:24,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 384 transitions. [2018-11-23 12:48:24,262 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 384 transitions. Word has length 96 [2018-11-23 12:48:24,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:24,263 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 384 transitions. [2018-11-23 12:48:24,263 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:24,263 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 384 transitions. [2018-11-23 12:48:24,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2018-11-23 12:48:24,263 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:24,263 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:24,264 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:24,264 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:24,264 INFO L82 PathProgramCache]: Analyzing trace with hash 738551148, now seen corresponding path program 1 times [2018-11-23 12:48:24,264 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:24,264 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:24,265 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:24,265 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:24,265 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:24,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:24,389 INFO L256 TraceCheckUtils]: 0: Hoare triple {40258#true} call ULTIMATE.init(); {40258#true} is VALID [2018-11-23 12:48:24,389 INFO L273 TraceCheckUtils]: 1: Hoare triple {40258#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,390 INFO L273 TraceCheckUtils]: 2: Hoare triple {40258#true} assume true; {40258#true} is VALID [2018-11-23 12:48:24,390 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40258#true} {40258#true} #632#return; {40258#true} is VALID [2018-11-23 12:48:24,390 INFO L256 TraceCheckUtils]: 4: Hoare triple {40258#true} call #t~ret138 := main(); {40258#true} is VALID [2018-11-23 12:48:24,390 INFO L273 TraceCheckUtils]: 5: Hoare triple {40258#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,390 INFO L256 TraceCheckUtils]: 6: Hoare triple {40258#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {40258#true} is VALID [2018-11-23 12:48:24,391 INFO L273 TraceCheckUtils]: 7: Hoare triple {40258#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,391 INFO L273 TraceCheckUtils]: 8: Hoare triple {40258#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {40258#true} is VALID [2018-11-23 12:48:24,391 INFO L273 TraceCheckUtils]: 9: Hoare triple {40258#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {40258#true} is VALID [2018-11-23 12:48:24,391 INFO L273 TraceCheckUtils]: 10: Hoare triple {40258#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {40258#true} is VALID [2018-11-23 12:48:24,391 INFO L273 TraceCheckUtils]: 11: Hoare triple {40258#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 12: Hoare triple {40258#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 13: Hoare triple {40258#true} assume !false; {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 14: Hoare triple {40258#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 15: Hoare triple {40258#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 16: Hoare triple {40258#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 17: Hoare triple {40258#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 18: Hoare triple {40258#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,392 INFO L273 TraceCheckUtils]: 19: Hoare triple {40258#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 20: Hoare triple {40258#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 21: Hoare triple {40258#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 22: Hoare triple {40258#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 23: Hoare triple {40258#true} assume 8464 == #t~mem32;havoc #t~mem32; {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 24: Hoare triple {40258#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 25: Hoare triple {40258#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 26: Hoare triple {40258#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 27: Hoare triple {40258#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,393 INFO L273 TraceCheckUtils]: 28: Hoare triple {40258#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 29: Hoare triple {40258#true} ~skip~0 := 0; {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 30: Hoare triple {40258#true} assume !false; {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 31: Hoare triple {40258#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 32: Hoare triple {40258#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 33: Hoare triple {40258#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 34: Hoare triple {40258#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 35: Hoare triple {40258#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 36: Hoare triple {40258#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,394 INFO L273 TraceCheckUtils]: 37: Hoare triple {40258#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 38: Hoare triple {40258#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 39: Hoare triple {40258#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 40: Hoare triple {40258#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 41: Hoare triple {40258#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 42: Hoare triple {40258#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 43: Hoare triple {40258#true} assume 8496 == #t~mem35;havoc #t~mem35; {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 44: Hoare triple {40258#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 45: Hoare triple {40258#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {40258#true} is VALID [2018-11-23 12:48:24,395 INFO L273 TraceCheckUtils]: 46: Hoare triple {40258#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {40258#true} is VALID [2018-11-23 12:48:24,396 INFO L273 TraceCheckUtils]: 47: Hoare triple {40258#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,397 INFO L273 TraceCheckUtils]: 48: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,398 INFO L273 TraceCheckUtils]: 49: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,398 INFO L273 TraceCheckUtils]: 50: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,398 INFO L273 TraceCheckUtils]: 51: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,399 INFO L273 TraceCheckUtils]: 52: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,399 INFO L273 TraceCheckUtils]: 53: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,400 INFO L273 TraceCheckUtils]: 54: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,400 INFO L273 TraceCheckUtils]: 55: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,401 INFO L273 TraceCheckUtils]: 56: Hoare triple {40260#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40261#(= 8656 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:48:24,402 INFO L273 TraceCheckUtils]: 57: Hoare triple {40261#(= 8656 |ssl3_accept_#t~mem27|)} assume 24576 == #t~mem27;havoc #t~mem27; {40259#false} is VALID [2018-11-23 12:48:24,402 INFO L273 TraceCheckUtils]: 58: Hoare triple {40259#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,402 INFO L273 TraceCheckUtils]: 59: Hoare triple {40259#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {40259#false} is VALID [2018-11-23 12:48:24,402 INFO L273 TraceCheckUtils]: 60: Hoare triple {40259#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,402 INFO L273 TraceCheckUtils]: 61: Hoare triple {40259#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,403 INFO L273 TraceCheckUtils]: 62: Hoare triple {40259#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {40259#false} is VALID [2018-11-23 12:48:24,403 INFO L273 TraceCheckUtils]: 63: Hoare triple {40259#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,403 INFO L273 TraceCheckUtils]: 64: Hoare triple {40259#false} assume 12292 != #t~mem62;havoc #t~mem62; {40259#false} is VALID [2018-11-23 12:48:24,403 INFO L273 TraceCheckUtils]: 65: Hoare triple {40259#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {40259#false} is VALID [2018-11-23 12:48:24,403 INFO L273 TraceCheckUtils]: 66: Hoare triple {40259#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,404 INFO L273 TraceCheckUtils]: 67: Hoare triple {40259#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {40259#false} is VALID [2018-11-23 12:48:24,404 INFO L273 TraceCheckUtils]: 68: Hoare triple {40259#false} ~skip~0 := 0; {40259#false} is VALID [2018-11-23 12:48:24,404 INFO L273 TraceCheckUtils]: 69: Hoare triple {40259#false} assume !false; {40259#false} is VALID [2018-11-23 12:48:24,404 INFO L273 TraceCheckUtils]: 70: Hoare triple {40259#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,404 INFO L273 TraceCheckUtils]: 71: Hoare triple {40259#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,404 INFO L273 TraceCheckUtils]: 72: Hoare triple {40259#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,405 INFO L273 TraceCheckUtils]: 73: Hoare triple {40259#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,405 INFO L273 TraceCheckUtils]: 74: Hoare triple {40259#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,405 INFO L273 TraceCheckUtils]: 75: Hoare triple {40259#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,405 INFO L273 TraceCheckUtils]: 76: Hoare triple {40259#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,405 INFO L273 TraceCheckUtils]: 77: Hoare triple {40259#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 78: Hoare triple {40259#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 79: Hoare triple {40259#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 80: Hoare triple {40259#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 81: Hoare triple {40259#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 82: Hoare triple {40259#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 83: Hoare triple {40259#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 84: Hoare triple {40259#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,406 INFO L273 TraceCheckUtils]: 85: Hoare triple {40259#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 86: Hoare triple {40259#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 87: Hoare triple {40259#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 88: Hoare triple {40259#false} assume 8544 == #t~mem41;havoc #t~mem41; {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 89: Hoare triple {40259#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 90: Hoare triple {40259#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 91: Hoare triple {40259#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 92: Hoare triple {40259#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 93: Hoare triple {40259#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {40259#false} is VALID [2018-11-23 12:48:24,407 INFO L273 TraceCheckUtils]: 94: Hoare triple {40259#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {40259#false} is VALID [2018-11-23 12:48:24,408 INFO L273 TraceCheckUtils]: 95: Hoare triple {40259#false} assume 8 == ~blastFlag~0; {40259#false} is VALID [2018-11-23 12:48:24,408 INFO L273 TraceCheckUtils]: 96: Hoare triple {40259#false} assume !false; {40259#false} is VALID [2018-11-23 12:48:24,413 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:24,413 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:24,413 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:24,414 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:24,414 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:24,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:24,503 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:24,503 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:24,503 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:24,504 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:24,504 INFO L87 Difference]: Start difference. First operand 260 states and 384 transitions. Second operand 4 states. [2018-11-23 12:48:26,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:26,001 INFO L93 Difference]: Finished difference Result 540 states and 799 transitions. [2018-11-23 12:48:26,001 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:26,001 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:26,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:26,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:26,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 535 transitions. [2018-11-23 12:48:26,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:26,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 535 transitions. [2018-11-23 12:48:26,007 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 535 transitions. [2018-11-23 12:48:26,603 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 535 edges. 535 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:26,610 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:26,610 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:26,611 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:26,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:26,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:26,713 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:26,713 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:26,713 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:26,713 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:26,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:26,720 INFO L93 Difference]: Finished difference Result 305 states and 442 transitions. [2018-11-23 12:48:26,720 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 442 transitions. [2018-11-23 12:48:26,720 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:26,721 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:26,721 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:26,721 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:26,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:26,726 INFO L93 Difference]: Finished difference Result 305 states and 442 transitions. [2018-11-23 12:48:26,726 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 442 transitions. [2018-11-23 12:48:26,727 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:26,727 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:26,727 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:26,727 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:26,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:26,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 383 transitions. [2018-11-23 12:48:26,731 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 383 transitions. Word has length 97 [2018-11-23 12:48:26,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:26,732 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 383 transitions. [2018-11-23 12:48:26,732 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:26,732 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 383 transitions. [2018-11-23 12:48:26,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2018-11-23 12:48:26,733 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:26,733 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:26,733 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:26,733 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:26,734 INFO L82 PathProgramCache]: Analyzing trace with hash 257470890, now seen corresponding path program 1 times [2018-11-23 12:48:26,734 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:26,734 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:26,735 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:26,735 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:26,735 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:26,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:26,946 INFO L256 TraceCheckUtils]: 0: Hoare triple {41798#true} call ULTIMATE.init(); {41798#true} is VALID [2018-11-23 12:48:26,947 INFO L273 TraceCheckUtils]: 1: Hoare triple {41798#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,947 INFO L273 TraceCheckUtils]: 2: Hoare triple {41798#true} assume true; {41798#true} is VALID [2018-11-23 12:48:26,947 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {41798#true} {41798#true} #632#return; {41798#true} is VALID [2018-11-23 12:48:26,948 INFO L256 TraceCheckUtils]: 4: Hoare triple {41798#true} call #t~ret138 := main(); {41798#true} is VALID [2018-11-23 12:48:26,948 INFO L273 TraceCheckUtils]: 5: Hoare triple {41798#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,948 INFO L256 TraceCheckUtils]: 6: Hoare triple {41798#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {41798#true} is VALID [2018-11-23 12:48:26,949 INFO L273 TraceCheckUtils]: 7: Hoare triple {41798#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,949 INFO L273 TraceCheckUtils]: 8: Hoare triple {41798#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {41798#true} is VALID [2018-11-23 12:48:26,949 INFO L273 TraceCheckUtils]: 9: Hoare triple {41798#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {41798#true} is VALID [2018-11-23 12:48:26,949 INFO L273 TraceCheckUtils]: 10: Hoare triple {41798#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {41798#true} is VALID [2018-11-23 12:48:26,949 INFO L273 TraceCheckUtils]: 11: Hoare triple {41798#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,949 INFO L273 TraceCheckUtils]: 12: Hoare triple {41798#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {41798#true} is VALID [2018-11-23 12:48:26,950 INFO L273 TraceCheckUtils]: 13: Hoare triple {41798#true} assume !false; {41798#true} is VALID [2018-11-23 12:48:26,950 INFO L273 TraceCheckUtils]: 14: Hoare triple {41798#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,950 INFO L273 TraceCheckUtils]: 15: Hoare triple {41798#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,950 INFO L273 TraceCheckUtils]: 16: Hoare triple {41798#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,950 INFO L273 TraceCheckUtils]: 17: Hoare triple {41798#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,950 INFO L273 TraceCheckUtils]: 18: Hoare triple {41798#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 19: Hoare triple {41798#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 20: Hoare triple {41798#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 21: Hoare triple {41798#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 22: Hoare triple {41798#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 23: Hoare triple {41798#true} assume 8464 == #t~mem32;havoc #t~mem32; {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 24: Hoare triple {41798#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {41798#true} is VALID [2018-11-23 12:48:26,951 INFO L273 TraceCheckUtils]: 25: Hoare triple {41798#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 26: Hoare triple {41798#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 27: Hoare triple {41798#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 28: Hoare triple {41798#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 29: Hoare triple {41798#true} ~skip~0 := 0; {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 30: Hoare triple {41798#true} assume !false; {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 31: Hoare triple {41798#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 32: Hoare triple {41798#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,952 INFO L273 TraceCheckUtils]: 33: Hoare triple {41798#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 34: Hoare triple {41798#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 35: Hoare triple {41798#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 36: Hoare triple {41798#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 37: Hoare triple {41798#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 38: Hoare triple {41798#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 39: Hoare triple {41798#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 40: Hoare triple {41798#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 41: Hoare triple {41798#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,953 INFO L273 TraceCheckUtils]: 42: Hoare triple {41798#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,954 INFO L273 TraceCheckUtils]: 43: Hoare triple {41798#true} assume 8496 == #t~mem35;havoc #t~mem35; {41798#true} is VALID [2018-11-23 12:48:26,954 INFO L273 TraceCheckUtils]: 44: Hoare triple {41798#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {41798#true} is VALID [2018-11-23 12:48:26,954 INFO L273 TraceCheckUtils]: 45: Hoare triple {41798#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {41798#true} is VALID [2018-11-23 12:48:26,954 INFO L273 TraceCheckUtils]: 46: Hoare triple {41798#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {41798#true} is VALID [2018-11-23 12:48:26,955 INFO L273 TraceCheckUtils]: 47: Hoare triple {41798#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,956 INFO L273 TraceCheckUtils]: 48: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,956 INFO L273 TraceCheckUtils]: 49: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,956 INFO L273 TraceCheckUtils]: 50: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,957 INFO L273 TraceCheckUtils]: 51: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,957 INFO L273 TraceCheckUtils]: 52: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,957 INFO L273 TraceCheckUtils]: 53: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,958 INFO L273 TraceCheckUtils]: 54: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,958 INFO L273 TraceCheckUtils]: 55: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,958 INFO L273 TraceCheckUtils]: 56: Hoare triple {41800#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41801#(= 8512 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:48:26,959 INFO L273 TraceCheckUtils]: 57: Hoare triple {41801#(= 8512 |ssl3_accept_#t~mem27|)} assume 24576 == #t~mem27;havoc #t~mem27; {41799#false} is VALID [2018-11-23 12:48:26,959 INFO L273 TraceCheckUtils]: 58: Hoare triple {41799#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,959 INFO L273 TraceCheckUtils]: 59: Hoare triple {41799#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {41799#false} is VALID [2018-11-23 12:48:26,960 INFO L273 TraceCheckUtils]: 60: Hoare triple {41799#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,960 INFO L273 TraceCheckUtils]: 61: Hoare triple {41799#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,960 INFO L273 TraceCheckUtils]: 62: Hoare triple {41799#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {41799#false} is VALID [2018-11-23 12:48:26,960 INFO L273 TraceCheckUtils]: 63: Hoare triple {41799#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,960 INFO L273 TraceCheckUtils]: 64: Hoare triple {41799#false} assume 12292 != #t~mem62;havoc #t~mem62; {41799#false} is VALID [2018-11-23 12:48:26,961 INFO L273 TraceCheckUtils]: 65: Hoare triple {41799#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {41799#false} is VALID [2018-11-23 12:48:26,961 INFO L273 TraceCheckUtils]: 66: Hoare triple {41799#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,961 INFO L273 TraceCheckUtils]: 67: Hoare triple {41799#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {41799#false} is VALID [2018-11-23 12:48:26,961 INFO L273 TraceCheckUtils]: 68: Hoare triple {41799#false} ~skip~0 := 0; {41799#false} is VALID [2018-11-23 12:48:26,961 INFO L273 TraceCheckUtils]: 69: Hoare triple {41799#false} assume !false; {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 70: Hoare triple {41799#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 71: Hoare triple {41799#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 72: Hoare triple {41799#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 73: Hoare triple {41799#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 74: Hoare triple {41799#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 75: Hoare triple {41799#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 76: Hoare triple {41799#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 77: Hoare triple {41799#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,962 INFO L273 TraceCheckUtils]: 78: Hoare triple {41799#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 79: Hoare triple {41799#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 80: Hoare triple {41799#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 81: Hoare triple {41799#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 82: Hoare triple {41799#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 83: Hoare triple {41799#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 84: Hoare triple {41799#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 85: Hoare triple {41799#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 86: Hoare triple {41799#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,963 INFO L273 TraceCheckUtils]: 87: Hoare triple {41799#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 88: Hoare triple {41799#false} assume 8544 == #t~mem41;havoc #t~mem41; {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 89: Hoare triple {41799#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 90: Hoare triple {41799#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 91: Hoare triple {41799#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 92: Hoare triple {41799#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 93: Hoare triple {41799#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 94: Hoare triple {41799#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {41799#false} is VALID [2018-11-23 12:48:26,964 INFO L273 TraceCheckUtils]: 95: Hoare triple {41799#false} assume 8 == ~blastFlag~0; {41799#false} is VALID [2018-11-23 12:48:26,965 INFO L273 TraceCheckUtils]: 96: Hoare triple {41799#false} assume !false; {41799#false} is VALID [2018-11-23 12:48:26,970 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:26,970 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:26,970 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:26,970 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:26,971 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:26,971 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:27,060 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:27,061 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:27,061 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:27,061 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:27,061 INFO L87 Difference]: Start difference. First operand 260 states and 383 transitions. Second operand 4 states. [2018-11-23 12:48:28,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:28,496 INFO L93 Difference]: Finished difference Result 517 states and 767 transitions. [2018-11-23 12:48:28,497 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:28,497 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:28,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:28,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:28,499 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 12:48:28,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:28,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 12:48:28,501 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 475 transitions. [2018-11-23 12:48:28,983 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 475 edges. 475 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:28,989 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:28,989 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:28,990 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:28,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:29,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:29,140 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:29,140 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:29,140 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:29,141 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:29,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:29,146 INFO L93 Difference]: Finished difference Result 282 states and 411 transitions. [2018-11-23 12:48:29,146 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 411 transitions. [2018-11-23 12:48:29,146 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:29,146 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:29,146 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:29,146 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:29,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:29,151 INFO L93 Difference]: Finished difference Result 282 states and 411 transitions. [2018-11-23 12:48:29,151 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 411 transitions. [2018-11-23 12:48:29,152 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:29,152 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:29,152 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:29,152 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:29,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:29,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 382 transitions. [2018-11-23 12:48:29,156 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 382 transitions. Word has length 97 [2018-11-23 12:48:29,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:29,156 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 382 transitions. [2018-11-23 12:48:29,156 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:29,156 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 382 transitions. [2018-11-23 12:48:29,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2018-11-23 12:48:29,157 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:29,157 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:29,157 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:29,157 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:29,158 INFO L82 PathProgramCache]: Analyzing trace with hash -2050028325, now seen corresponding path program 1 times [2018-11-23 12:48:29,158 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:29,158 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:29,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:29,159 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:29,159 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:29,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:29,766 INFO L256 TraceCheckUtils]: 0: Hoare triple {43261#true} call ULTIMATE.init(); {43261#true} is VALID [2018-11-23 12:48:29,767 INFO L273 TraceCheckUtils]: 1: Hoare triple {43261#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,767 INFO L273 TraceCheckUtils]: 2: Hoare triple {43261#true} assume true; {43261#true} is VALID [2018-11-23 12:48:29,767 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {43261#true} {43261#true} #632#return; {43261#true} is VALID [2018-11-23 12:48:29,767 INFO L256 TraceCheckUtils]: 4: Hoare triple {43261#true} call #t~ret138 := main(); {43261#true} is VALID [2018-11-23 12:48:29,767 INFO L273 TraceCheckUtils]: 5: Hoare triple {43261#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,768 INFO L256 TraceCheckUtils]: 6: Hoare triple {43261#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {43261#true} is VALID [2018-11-23 12:48:29,768 INFO L273 TraceCheckUtils]: 7: Hoare triple {43261#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,768 INFO L273 TraceCheckUtils]: 8: Hoare triple {43261#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {43261#true} is VALID [2018-11-23 12:48:29,768 INFO L273 TraceCheckUtils]: 9: Hoare triple {43261#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {43261#true} is VALID [2018-11-23 12:48:29,768 INFO L273 TraceCheckUtils]: 10: Hoare triple {43261#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {43261#true} is VALID [2018-11-23 12:48:29,769 INFO L273 TraceCheckUtils]: 11: Hoare triple {43261#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,769 INFO L273 TraceCheckUtils]: 12: Hoare triple {43261#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {43261#true} is VALID [2018-11-23 12:48:29,769 INFO L273 TraceCheckUtils]: 13: Hoare triple {43261#true} assume !false; {43261#true} is VALID [2018-11-23 12:48:29,769 INFO L273 TraceCheckUtils]: 14: Hoare triple {43261#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 15: Hoare triple {43261#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 16: Hoare triple {43261#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 17: Hoare triple {43261#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 18: Hoare triple {43261#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 19: Hoare triple {43261#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 20: Hoare triple {43261#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 21: Hoare triple {43261#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,770 INFO L273 TraceCheckUtils]: 22: Hoare triple {43261#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 23: Hoare triple {43261#true} assume 8464 == #t~mem32;havoc #t~mem32; {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 24: Hoare triple {43261#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 25: Hoare triple {43261#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 26: Hoare triple {43261#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 27: Hoare triple {43261#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 28: Hoare triple {43261#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {43261#true} is VALID [2018-11-23 12:48:29,771 INFO L273 TraceCheckUtils]: 29: Hoare triple {43261#true} ~skip~0 := 0; {43261#true} is VALID [2018-11-23 12:48:29,772 INFO L273 TraceCheckUtils]: 30: Hoare triple {43261#true} assume !false; {43261#true} is VALID [2018-11-23 12:48:29,772 INFO L273 TraceCheckUtils]: 31: Hoare triple {43261#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,772 INFO L273 TraceCheckUtils]: 32: Hoare triple {43261#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,772 INFO L273 TraceCheckUtils]: 33: Hoare triple {43261#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,772 INFO L273 TraceCheckUtils]: 34: Hoare triple {43261#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,772 INFO L273 TraceCheckUtils]: 35: Hoare triple {43261#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,773 INFO L273 TraceCheckUtils]: 36: Hoare triple {43261#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,773 INFO L273 TraceCheckUtils]: 37: Hoare triple {43261#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,773 INFO L273 TraceCheckUtils]: 38: Hoare triple {43261#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,773 INFO L273 TraceCheckUtils]: 39: Hoare triple {43261#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,773 INFO L273 TraceCheckUtils]: 40: Hoare triple {43261#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,773 INFO L273 TraceCheckUtils]: 41: Hoare triple {43261#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,774 INFO L273 TraceCheckUtils]: 42: Hoare triple {43261#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,774 INFO L273 TraceCheckUtils]: 43: Hoare triple {43261#true} assume 8496 == #t~mem35;havoc #t~mem35; {43261#true} is VALID [2018-11-23 12:48:29,774 INFO L273 TraceCheckUtils]: 44: Hoare triple {43261#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {43261#true} is VALID [2018-11-23 12:48:29,774 INFO L273 TraceCheckUtils]: 45: Hoare triple {43261#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {43261#true} is VALID [2018-11-23 12:48:29,774 INFO L273 TraceCheckUtils]: 46: Hoare triple {43261#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {43261#true} is VALID [2018-11-23 12:48:29,778 INFO L273 TraceCheckUtils]: 47: Hoare triple {43261#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,779 INFO L273 TraceCheckUtils]: 48: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,782 INFO L273 TraceCheckUtils]: 49: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,782 INFO L273 TraceCheckUtils]: 50: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,782 INFO L273 TraceCheckUtils]: 51: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,783 INFO L273 TraceCheckUtils]: 52: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,783 INFO L273 TraceCheckUtils]: 53: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,783 INFO L273 TraceCheckUtils]: 54: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,784 INFO L273 TraceCheckUtils]: 55: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,784 INFO L273 TraceCheckUtils]: 56: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:29,784 INFO L273 TraceCheckUtils]: 57: Hoare triple {43263#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43264#(= 8656 |ssl3_accept_#t~mem28|)} is VALID [2018-11-23 12:48:29,785 INFO L273 TraceCheckUtils]: 58: Hoare triple {43264#(= 8656 |ssl3_accept_#t~mem28|)} assume 8195 == #t~mem28;havoc #t~mem28; {43262#false} is VALID [2018-11-23 12:48:29,785 INFO L273 TraceCheckUtils]: 59: Hoare triple {43262#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,785 INFO L273 TraceCheckUtils]: 60: Hoare triple {43262#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {43262#false} is VALID [2018-11-23 12:48:29,785 INFO L273 TraceCheckUtils]: 61: Hoare triple {43262#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,786 INFO L273 TraceCheckUtils]: 62: Hoare triple {43262#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,786 INFO L273 TraceCheckUtils]: 63: Hoare triple {43262#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {43262#false} is VALID [2018-11-23 12:48:29,786 INFO L273 TraceCheckUtils]: 64: Hoare triple {43262#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,786 INFO L273 TraceCheckUtils]: 65: Hoare triple {43262#false} assume 12292 != #t~mem62;havoc #t~mem62; {43262#false} is VALID [2018-11-23 12:48:29,786 INFO L273 TraceCheckUtils]: 66: Hoare triple {43262#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {43262#false} is VALID [2018-11-23 12:48:29,787 INFO L273 TraceCheckUtils]: 67: Hoare triple {43262#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,787 INFO L273 TraceCheckUtils]: 68: Hoare triple {43262#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {43262#false} is VALID [2018-11-23 12:48:29,787 INFO L273 TraceCheckUtils]: 69: Hoare triple {43262#false} ~skip~0 := 0; {43262#false} is VALID [2018-11-23 12:48:29,787 INFO L273 TraceCheckUtils]: 70: Hoare triple {43262#false} assume !false; {43262#false} is VALID [2018-11-23 12:48:29,787 INFO L273 TraceCheckUtils]: 71: Hoare triple {43262#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 72: Hoare triple {43262#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 73: Hoare triple {43262#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 74: Hoare triple {43262#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 75: Hoare triple {43262#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 76: Hoare triple {43262#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 77: Hoare triple {43262#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 78: Hoare triple {43262#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,788 INFO L273 TraceCheckUtils]: 79: Hoare triple {43262#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 80: Hoare triple {43262#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 81: Hoare triple {43262#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 82: Hoare triple {43262#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 83: Hoare triple {43262#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 84: Hoare triple {43262#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 85: Hoare triple {43262#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 86: Hoare triple {43262#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 87: Hoare triple {43262#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,789 INFO L273 TraceCheckUtils]: 88: Hoare triple {43262#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 89: Hoare triple {43262#false} assume 8544 == #t~mem41;havoc #t~mem41; {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 90: Hoare triple {43262#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 91: Hoare triple {43262#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 92: Hoare triple {43262#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 93: Hoare triple {43262#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 94: Hoare triple {43262#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 95: Hoare triple {43262#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 96: Hoare triple {43262#false} assume 8 == ~blastFlag~0; {43262#false} is VALID [2018-11-23 12:48:29,790 INFO L273 TraceCheckUtils]: 97: Hoare triple {43262#false} assume !false; {43262#false} is VALID [2018-11-23 12:48:29,796 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:29,796 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:29,796 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:29,797 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:29,797 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:29,797 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:29,886 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:29,886 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:29,886 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:29,886 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:29,887 INFO L87 Difference]: Start difference. First operand 260 states and 382 transitions. Second operand 4 states. [2018-11-23 12:48:31,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:31,226 INFO L93 Difference]: Finished difference Result 530 states and 783 transitions. [2018-11-23 12:48:31,226 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:31,226 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:31,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:31,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:31,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 522 transitions. [2018-11-23 12:48:31,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:31,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 522 transitions. [2018-11-23 12:48:31,230 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 522 transitions. [2018-11-23 12:48:31,746 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 522 edges. 522 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:31,752 INFO L225 Difference]: With dead ends: 530 [2018-11-23 12:48:31,752 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 12:48:31,753 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:31,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 12:48:31,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 260. [2018-11-23 12:48:31,897 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:31,897 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:31,898 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:31,898 INFO L87 Difference]: Start difference. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:31,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:31,903 INFO L93 Difference]: Finished difference Result 295 states and 428 transitions. [2018-11-23 12:48:31,903 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 428 transitions. [2018-11-23 12:48:31,903 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:31,903 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:31,903 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:31,904 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:31,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:31,909 INFO L93 Difference]: Finished difference Result 295 states and 428 transitions. [2018-11-23 12:48:31,909 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 428 transitions. [2018-11-23 12:48:31,910 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:31,910 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:31,910 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:31,910 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:31,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:31,914 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 381 transitions. [2018-11-23 12:48:31,914 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 381 transitions. Word has length 98 [2018-11-23 12:48:31,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:31,914 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 381 transitions. [2018-11-23 12:48:31,914 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:31,914 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 381 transitions. [2018-11-23 12:48:31,915 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2018-11-23 12:48:31,915 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:31,915 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:31,915 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:31,915 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:31,916 INFO L82 PathProgramCache]: Analyzing trace with hash 216352861, now seen corresponding path program 1 times [2018-11-23 12:48:31,916 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:31,916 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:31,916 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:31,917 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:31,917 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:31,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:32,025 INFO L256 TraceCheckUtils]: 0: Hoare triple {44770#true} call ULTIMATE.init(); {44770#true} is VALID [2018-11-23 12:48:32,025 INFO L273 TraceCheckUtils]: 1: Hoare triple {44770#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,025 INFO L273 TraceCheckUtils]: 2: Hoare triple {44770#true} assume true; {44770#true} is VALID [2018-11-23 12:48:32,025 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {44770#true} {44770#true} #632#return; {44770#true} is VALID [2018-11-23 12:48:32,026 INFO L256 TraceCheckUtils]: 4: Hoare triple {44770#true} call #t~ret138 := main(); {44770#true} is VALID [2018-11-23 12:48:32,026 INFO L273 TraceCheckUtils]: 5: Hoare triple {44770#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,026 INFO L256 TraceCheckUtils]: 6: Hoare triple {44770#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {44770#true} is VALID [2018-11-23 12:48:32,026 INFO L273 TraceCheckUtils]: 7: Hoare triple {44770#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,026 INFO L273 TraceCheckUtils]: 8: Hoare triple {44770#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {44770#true} is VALID [2018-11-23 12:48:32,027 INFO L273 TraceCheckUtils]: 9: Hoare triple {44770#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {44770#true} is VALID [2018-11-23 12:48:32,027 INFO L273 TraceCheckUtils]: 10: Hoare triple {44770#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {44770#true} is VALID [2018-11-23 12:48:32,027 INFO L273 TraceCheckUtils]: 11: Hoare triple {44770#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,027 INFO L273 TraceCheckUtils]: 12: Hoare triple {44770#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {44770#true} is VALID [2018-11-23 12:48:32,027 INFO L273 TraceCheckUtils]: 13: Hoare triple {44770#true} assume !false; {44770#true} is VALID [2018-11-23 12:48:32,027 INFO L273 TraceCheckUtils]: 14: Hoare triple {44770#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 15: Hoare triple {44770#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 16: Hoare triple {44770#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 17: Hoare triple {44770#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 18: Hoare triple {44770#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 19: Hoare triple {44770#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 20: Hoare triple {44770#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 21: Hoare triple {44770#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 22: Hoare triple {44770#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,028 INFO L273 TraceCheckUtils]: 23: Hoare triple {44770#true} assume 8464 == #t~mem32;havoc #t~mem32; {44770#true} is VALID [2018-11-23 12:48:32,029 INFO L273 TraceCheckUtils]: 24: Hoare triple {44770#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {44770#true} is VALID [2018-11-23 12:48:32,029 INFO L273 TraceCheckUtils]: 25: Hoare triple {44770#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {44770#true} is VALID [2018-11-23 12:48:32,029 INFO L273 TraceCheckUtils]: 26: Hoare triple {44770#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,029 INFO L273 TraceCheckUtils]: 27: Hoare triple {44770#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,029 INFO L273 TraceCheckUtils]: 28: Hoare triple {44770#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {44770#true} is VALID [2018-11-23 12:48:32,029 INFO L273 TraceCheckUtils]: 29: Hoare triple {44770#true} ~skip~0 := 0; {44770#true} is VALID [2018-11-23 12:48:32,030 INFO L273 TraceCheckUtils]: 30: Hoare triple {44770#true} assume !false; {44770#true} is VALID [2018-11-23 12:48:32,030 INFO L273 TraceCheckUtils]: 31: Hoare triple {44770#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,030 INFO L273 TraceCheckUtils]: 32: Hoare triple {44770#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,030 INFO L273 TraceCheckUtils]: 33: Hoare triple {44770#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,030 INFO L273 TraceCheckUtils]: 34: Hoare triple {44770#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,030 INFO L273 TraceCheckUtils]: 35: Hoare triple {44770#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,031 INFO L273 TraceCheckUtils]: 36: Hoare triple {44770#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,031 INFO L273 TraceCheckUtils]: 37: Hoare triple {44770#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,031 INFO L273 TraceCheckUtils]: 38: Hoare triple {44770#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,031 INFO L273 TraceCheckUtils]: 39: Hoare triple {44770#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,031 INFO L273 TraceCheckUtils]: 40: Hoare triple {44770#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,031 INFO L273 TraceCheckUtils]: 41: Hoare triple {44770#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,032 INFO L273 TraceCheckUtils]: 42: Hoare triple {44770#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,032 INFO L273 TraceCheckUtils]: 43: Hoare triple {44770#true} assume 8496 == #t~mem35;havoc #t~mem35; {44770#true} is VALID [2018-11-23 12:48:32,032 INFO L273 TraceCheckUtils]: 44: Hoare triple {44770#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {44770#true} is VALID [2018-11-23 12:48:32,032 INFO L273 TraceCheckUtils]: 45: Hoare triple {44770#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {44770#true} is VALID [2018-11-23 12:48:32,032 INFO L273 TraceCheckUtils]: 46: Hoare triple {44770#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {44770#true} is VALID [2018-11-23 12:48:32,052 INFO L273 TraceCheckUtils]: 47: Hoare triple {44770#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,066 INFO L273 TraceCheckUtils]: 48: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,066 INFO L273 TraceCheckUtils]: 49: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,069 INFO L273 TraceCheckUtils]: 50: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,069 INFO L273 TraceCheckUtils]: 51: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,072 INFO L273 TraceCheckUtils]: 52: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,072 INFO L273 TraceCheckUtils]: 53: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,074 INFO L273 TraceCheckUtils]: 54: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,074 INFO L273 TraceCheckUtils]: 55: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,075 INFO L273 TraceCheckUtils]: 56: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:32,075 INFO L273 TraceCheckUtils]: 57: Hoare triple {44772#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44773#(= 8512 |ssl3_accept_#t~mem28|)} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 58: Hoare triple {44773#(= 8512 |ssl3_accept_#t~mem28|)} assume 8195 == #t~mem28;havoc #t~mem28; {44771#false} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 59: Hoare triple {44771#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 60: Hoare triple {44771#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {44771#false} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 61: Hoare triple {44771#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 62: Hoare triple {44771#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 63: Hoare triple {44771#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {44771#false} is VALID [2018-11-23 12:48:32,077 INFO L273 TraceCheckUtils]: 64: Hoare triple {44771#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 65: Hoare triple {44771#false} assume 12292 != #t~mem62;havoc #t~mem62; {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 66: Hoare triple {44771#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 67: Hoare triple {44771#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 68: Hoare triple {44771#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 69: Hoare triple {44771#false} ~skip~0 := 0; {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 70: Hoare triple {44771#false} assume !false; {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 71: Hoare triple {44771#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 72: Hoare triple {44771#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,078 INFO L273 TraceCheckUtils]: 73: Hoare triple {44771#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 74: Hoare triple {44771#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 75: Hoare triple {44771#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 76: Hoare triple {44771#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 77: Hoare triple {44771#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 78: Hoare triple {44771#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 79: Hoare triple {44771#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 80: Hoare triple {44771#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 81: Hoare triple {44771#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,079 INFO L273 TraceCheckUtils]: 82: Hoare triple {44771#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 83: Hoare triple {44771#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 84: Hoare triple {44771#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 85: Hoare triple {44771#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 86: Hoare triple {44771#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 87: Hoare triple {44771#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 88: Hoare triple {44771#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 89: Hoare triple {44771#false} assume 8544 == #t~mem41;havoc #t~mem41; {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 90: Hoare triple {44771#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,080 INFO L273 TraceCheckUtils]: 91: Hoare triple {44771#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,081 INFO L273 TraceCheckUtils]: 92: Hoare triple {44771#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {44771#false} is VALID [2018-11-23 12:48:32,081 INFO L273 TraceCheckUtils]: 93: Hoare triple {44771#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {44771#false} is VALID [2018-11-23 12:48:32,081 INFO L273 TraceCheckUtils]: 94: Hoare triple {44771#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {44771#false} is VALID [2018-11-23 12:48:32,081 INFO L273 TraceCheckUtils]: 95: Hoare triple {44771#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {44771#false} is VALID [2018-11-23 12:48:32,081 INFO L273 TraceCheckUtils]: 96: Hoare triple {44771#false} assume 8 == ~blastFlag~0; {44771#false} is VALID [2018-11-23 12:48:32,081 INFO L273 TraceCheckUtils]: 97: Hoare triple {44771#false} assume !false; {44771#false} is VALID [2018-11-23 12:48:32,087 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:32,087 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:32,087 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:32,087 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:32,087 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:32,088 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:32,177 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:32,177 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:32,178 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:32,178 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:32,178 INFO L87 Difference]: Start difference. First operand 260 states and 381 transitions. Second operand 4 states. [2018-11-23 12:48:33,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:33,476 INFO L93 Difference]: Finished difference Result 507 states and 751 transitions. [2018-11-23 12:48:33,476 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:33,476 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:33,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:33,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:33,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:48:33,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:33,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:48:33,480 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 462 transitions. [2018-11-23 12:48:33,936 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:33,941 INFO L225 Difference]: With dead ends: 507 [2018-11-23 12:48:33,942 INFO L226 Difference]: Without dead ends: 272 [2018-11-23 12:48:33,942 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:33,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2018-11-23 12:48:34,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 260. [2018-11-23 12:48:34,093 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:34,093 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand 260 states. [2018-11-23 12:48:34,093 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand 260 states. [2018-11-23 12:48:34,093 INFO L87 Difference]: Start difference. First operand 272 states. Second operand 260 states. [2018-11-23 12:48:34,097 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:34,097 INFO L93 Difference]: Finished difference Result 272 states and 397 transitions. [2018-11-23 12:48:34,098 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 397 transitions. [2018-11-23 12:48:34,098 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:34,098 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:34,098 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 272 states. [2018-11-23 12:48:34,098 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 272 states. [2018-11-23 12:48:34,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:34,103 INFO L93 Difference]: Finished difference Result 272 states and 397 transitions. [2018-11-23 12:48:34,103 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 397 transitions. [2018-11-23 12:48:34,103 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:34,104 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:34,104 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:34,104 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:34,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:34,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 380 transitions. [2018-11-23 12:48:34,108 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 380 transitions. Word has length 98 [2018-11-23 12:48:34,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:34,108 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 380 transitions. [2018-11-23 12:48:34,108 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:34,108 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 380 transitions. [2018-11-23 12:48:34,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2018-11-23 12:48:34,109 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:34,109 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:34,109 INFO L423 AbstractCegarLoop]: === Iteration 37 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:34,109 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:34,109 INFO L82 PathProgramCache]: Analyzing trace with hash -1019220863, now seen corresponding path program 1 times [2018-11-23 12:48:34,109 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:34,109 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:34,110 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:34,110 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:34,110 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:34,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:34,332 INFO L256 TraceCheckUtils]: 0: Hoare triple {46202#true} call ULTIMATE.init(); {46202#true} is VALID [2018-11-23 12:48:34,332 INFO L273 TraceCheckUtils]: 1: Hoare triple {46202#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,332 INFO L273 TraceCheckUtils]: 2: Hoare triple {46202#true} assume true; {46202#true} is VALID [2018-11-23 12:48:34,333 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {46202#true} {46202#true} #632#return; {46202#true} is VALID [2018-11-23 12:48:34,333 INFO L256 TraceCheckUtils]: 4: Hoare triple {46202#true} call #t~ret138 := main(); {46202#true} is VALID [2018-11-23 12:48:34,333 INFO L273 TraceCheckUtils]: 5: Hoare triple {46202#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,333 INFO L256 TraceCheckUtils]: 6: Hoare triple {46202#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {46202#true} is VALID [2018-11-23 12:48:34,333 INFO L273 TraceCheckUtils]: 7: Hoare triple {46202#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 8: Hoare triple {46202#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 9: Hoare triple {46202#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 10: Hoare triple {46202#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 11: Hoare triple {46202#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 12: Hoare triple {46202#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 13: Hoare triple {46202#true} assume !false; {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 14: Hoare triple {46202#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 15: Hoare triple {46202#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,334 INFO L273 TraceCheckUtils]: 16: Hoare triple {46202#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 17: Hoare triple {46202#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 18: Hoare triple {46202#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 19: Hoare triple {46202#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 20: Hoare triple {46202#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 21: Hoare triple {46202#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 22: Hoare triple {46202#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 23: Hoare triple {46202#true} assume 8464 == #t~mem32;havoc #t~mem32; {46202#true} is VALID [2018-11-23 12:48:34,335 INFO L273 TraceCheckUtils]: 24: Hoare triple {46202#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {46202#true} is VALID [2018-11-23 12:48:34,336 INFO L273 TraceCheckUtils]: 25: Hoare triple {46202#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {46202#true} is VALID [2018-11-23 12:48:34,336 INFO L273 TraceCheckUtils]: 26: Hoare triple {46202#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,336 INFO L273 TraceCheckUtils]: 27: Hoare triple {46202#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,336 INFO L273 TraceCheckUtils]: 28: Hoare triple {46202#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {46202#true} is VALID [2018-11-23 12:48:34,336 INFO L273 TraceCheckUtils]: 29: Hoare triple {46202#true} ~skip~0 := 0; {46202#true} is VALID [2018-11-23 12:48:34,336 INFO L273 TraceCheckUtils]: 30: Hoare triple {46202#true} assume !false; {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 31: Hoare triple {46202#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 32: Hoare triple {46202#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 33: Hoare triple {46202#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 34: Hoare triple {46202#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 35: Hoare triple {46202#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 36: Hoare triple {46202#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,337 INFO L273 TraceCheckUtils]: 37: Hoare triple {46202#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,338 INFO L273 TraceCheckUtils]: 38: Hoare triple {46202#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,338 INFO L273 TraceCheckUtils]: 39: Hoare triple {46202#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,338 INFO L273 TraceCheckUtils]: 40: Hoare triple {46202#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,338 INFO L273 TraceCheckUtils]: 41: Hoare triple {46202#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,338 INFO L273 TraceCheckUtils]: 42: Hoare triple {46202#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,338 INFO L273 TraceCheckUtils]: 43: Hoare triple {46202#true} assume 8496 == #t~mem35;havoc #t~mem35; {46202#true} is VALID [2018-11-23 12:48:34,339 INFO L273 TraceCheckUtils]: 44: Hoare triple {46202#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {46202#true} is VALID [2018-11-23 12:48:34,339 INFO L273 TraceCheckUtils]: 45: Hoare triple {46202#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {46202#true} is VALID [2018-11-23 12:48:34,339 INFO L273 TraceCheckUtils]: 46: Hoare triple {46202#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {46202#true} is VALID [2018-11-23 12:48:34,340 INFO L273 TraceCheckUtils]: 47: Hoare triple {46202#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,340 INFO L273 TraceCheckUtils]: 48: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,341 INFO L273 TraceCheckUtils]: 49: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,341 INFO L273 TraceCheckUtils]: 50: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,341 INFO L273 TraceCheckUtils]: 51: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,342 INFO L273 TraceCheckUtils]: 52: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,342 INFO L273 TraceCheckUtils]: 53: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,342 INFO L273 TraceCheckUtils]: 54: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,343 INFO L273 TraceCheckUtils]: 55: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,343 INFO L273 TraceCheckUtils]: 56: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,344 INFO L273 TraceCheckUtils]: 57: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,349 INFO L273 TraceCheckUtils]: 58: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,350 INFO L273 TraceCheckUtils]: 59: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,350 INFO L273 TraceCheckUtils]: 60: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,351 INFO L273 TraceCheckUtils]: 61: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,351 INFO L273 TraceCheckUtils]: 62: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,351 INFO L273 TraceCheckUtils]: 63: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,352 INFO L273 TraceCheckUtils]: 64: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,352 INFO L273 TraceCheckUtils]: 65: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:34,352 INFO L273 TraceCheckUtils]: 66: Hoare triple {46204#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {46205#(= 8656 |ssl3_accept_#t~mem37|)} is VALID [2018-11-23 12:48:34,353 INFO L273 TraceCheckUtils]: 67: Hoare triple {46205#(= 8656 |ssl3_accept_#t~mem37|)} assume 8512 == #t~mem37;havoc #t~mem37; {46203#false} is VALID [2018-11-23 12:48:34,353 INFO L273 TraceCheckUtils]: 68: Hoare triple {46203#false} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,353 INFO L273 TraceCheckUtils]: 69: Hoare triple {46203#false} assume 0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;~skip~0 := 1; {46203#false} is VALID [2018-11-23 12:48:34,353 INFO L273 TraceCheckUtils]: 70: Hoare triple {46203#false} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,353 INFO L273 TraceCheckUtils]: 71: Hoare triple {46203#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,353 INFO L273 TraceCheckUtils]: 72: Hoare triple {46203#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {46203#false} is VALID [2018-11-23 12:48:34,354 INFO L273 TraceCheckUtils]: 73: Hoare triple {46203#false} ~skip~0 := 0; {46203#false} is VALID [2018-11-23 12:48:34,354 INFO L273 TraceCheckUtils]: 74: Hoare triple {46203#false} assume !false; {46203#false} is VALID [2018-11-23 12:48:34,354 INFO L273 TraceCheckUtils]: 75: Hoare triple {46203#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,354 INFO L273 TraceCheckUtils]: 76: Hoare triple {46203#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,354 INFO L273 TraceCheckUtils]: 77: Hoare triple {46203#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,355 INFO L273 TraceCheckUtils]: 78: Hoare triple {46203#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,355 INFO L273 TraceCheckUtils]: 79: Hoare triple {46203#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,355 INFO L273 TraceCheckUtils]: 80: Hoare triple {46203#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,355 INFO L273 TraceCheckUtils]: 81: Hoare triple {46203#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,355 INFO L273 TraceCheckUtils]: 82: Hoare triple {46203#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,356 INFO L273 TraceCheckUtils]: 83: Hoare triple {46203#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,356 INFO L273 TraceCheckUtils]: 84: Hoare triple {46203#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,356 INFO L273 TraceCheckUtils]: 85: Hoare triple {46203#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,356 INFO L273 TraceCheckUtils]: 86: Hoare triple {46203#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,356 INFO L273 TraceCheckUtils]: 87: Hoare triple {46203#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,357 INFO L273 TraceCheckUtils]: 88: Hoare triple {46203#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,357 INFO L273 TraceCheckUtils]: 89: Hoare triple {46203#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,357 INFO L273 TraceCheckUtils]: 90: Hoare triple {46203#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,357 INFO L273 TraceCheckUtils]: 91: Hoare triple {46203#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,358 INFO L273 TraceCheckUtils]: 92: Hoare triple {46203#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,358 INFO L273 TraceCheckUtils]: 93: Hoare triple {46203#false} assume 8544 == #t~mem41;havoc #t~mem41; {46203#false} is VALID [2018-11-23 12:48:34,358 INFO L273 TraceCheckUtils]: 94: Hoare triple {46203#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,358 INFO L273 TraceCheckUtils]: 95: Hoare triple {46203#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,358 INFO L273 TraceCheckUtils]: 96: Hoare triple {46203#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {46203#false} is VALID [2018-11-23 12:48:34,358 INFO L273 TraceCheckUtils]: 97: Hoare triple {46203#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {46203#false} is VALID [2018-11-23 12:48:34,359 INFO L273 TraceCheckUtils]: 98: Hoare triple {46203#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {46203#false} is VALID [2018-11-23 12:48:34,359 INFO L273 TraceCheckUtils]: 99: Hoare triple {46203#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {46203#false} is VALID [2018-11-23 12:48:34,359 INFO L273 TraceCheckUtils]: 100: Hoare triple {46203#false} assume 8 == ~blastFlag~0; {46203#false} is VALID [2018-11-23 12:48:34,359 INFO L273 TraceCheckUtils]: 101: Hoare triple {46203#false} assume !false; {46203#false} is VALID [2018-11-23 12:48:34,369 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:34,370 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:34,370 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:34,370 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 102 [2018-11-23 12:48:34,370 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:34,370 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:34,472 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:34,472 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:34,473 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:34,473 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:34,473 INFO L87 Difference]: Start difference. First operand 260 states and 380 transitions. Second operand 4 states. [2018-11-23 12:48:35,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:35,849 INFO L93 Difference]: Finished difference Result 530 states and 779 transitions. [2018-11-23 12:48:35,849 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:35,849 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 102 [2018-11-23 12:48:35,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:35,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:35,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 521 transitions. [2018-11-23 12:48:35,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:35,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 521 transitions. [2018-11-23 12:48:35,853 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 521 transitions. [2018-11-23 12:48:36,450 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 521 edges. 521 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:36,457 INFO L225 Difference]: With dead ends: 530 [2018-11-23 12:48:36,457 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 12:48:36,458 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:36,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 12:48:36,554 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 260. [2018-11-23 12:48:36,554 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:36,555 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:36,555 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:36,555 INFO L87 Difference]: Start difference. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:36,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:36,561 INFO L93 Difference]: Finished difference Result 295 states and 426 transitions. [2018-11-23 12:48:36,561 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 426 transitions. [2018-11-23 12:48:36,561 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:36,561 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:36,561 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:36,561 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:36,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:36,566 INFO L93 Difference]: Finished difference Result 295 states and 426 transitions. [2018-11-23 12:48:36,566 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 426 transitions. [2018-11-23 12:48:36,567 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:36,567 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:36,567 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:36,567 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:36,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:36,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 379 transitions. [2018-11-23 12:48:36,571 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 379 transitions. Word has length 102 [2018-11-23 12:48:36,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:36,571 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 379 transitions. [2018-11-23 12:48:36,571 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:36,571 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 379 transitions. [2018-11-23 12:48:36,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2018-11-23 12:48:36,572 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:36,572 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:36,572 INFO L423 AbstractCegarLoop]: === Iteration 38 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:36,572 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:36,572 INFO L82 PathProgramCache]: Analyzing trace with hash 367564547, now seen corresponding path program 1 times [2018-11-23 12:48:36,573 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:36,573 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:36,573 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:36,573 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:36,574 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:36,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:36,824 INFO L256 TraceCheckUtils]: 0: Hoare triple {47711#true} call ULTIMATE.init(); {47711#true} is VALID [2018-11-23 12:48:36,824 INFO L273 TraceCheckUtils]: 1: Hoare triple {47711#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,824 INFO L273 TraceCheckUtils]: 2: Hoare triple {47711#true} assume true; {47711#true} is VALID [2018-11-23 12:48:36,824 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {47711#true} {47711#true} #632#return; {47711#true} is VALID [2018-11-23 12:48:36,824 INFO L256 TraceCheckUtils]: 4: Hoare triple {47711#true} call #t~ret138 := main(); {47711#true} is VALID [2018-11-23 12:48:36,825 INFO L273 TraceCheckUtils]: 5: Hoare triple {47711#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,825 INFO L256 TraceCheckUtils]: 6: Hoare triple {47711#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {47711#true} is VALID [2018-11-23 12:48:36,825 INFO L273 TraceCheckUtils]: 7: Hoare triple {47711#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,825 INFO L273 TraceCheckUtils]: 8: Hoare triple {47711#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {47711#true} is VALID [2018-11-23 12:48:36,825 INFO L273 TraceCheckUtils]: 9: Hoare triple {47711#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {47711#true} is VALID [2018-11-23 12:48:36,825 INFO L273 TraceCheckUtils]: 10: Hoare triple {47711#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {47711#true} is VALID [2018-11-23 12:48:36,826 INFO L273 TraceCheckUtils]: 11: Hoare triple {47711#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,826 INFO L273 TraceCheckUtils]: 12: Hoare triple {47711#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {47711#true} is VALID [2018-11-23 12:48:36,826 INFO L273 TraceCheckUtils]: 13: Hoare triple {47711#true} assume !false; {47711#true} is VALID [2018-11-23 12:48:36,826 INFO L273 TraceCheckUtils]: 14: Hoare triple {47711#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,826 INFO L273 TraceCheckUtils]: 15: Hoare triple {47711#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,826 INFO L273 TraceCheckUtils]: 16: Hoare triple {47711#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 17: Hoare triple {47711#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 18: Hoare triple {47711#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 19: Hoare triple {47711#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 20: Hoare triple {47711#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 21: Hoare triple {47711#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 22: Hoare triple {47711#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,827 INFO L273 TraceCheckUtils]: 23: Hoare triple {47711#true} assume 8464 == #t~mem32;havoc #t~mem32; {47711#true} is VALID [2018-11-23 12:48:36,828 INFO L273 TraceCheckUtils]: 24: Hoare triple {47711#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {47711#true} is VALID [2018-11-23 12:48:36,828 INFO L273 TraceCheckUtils]: 25: Hoare triple {47711#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {47711#true} is VALID [2018-11-23 12:48:36,828 INFO L273 TraceCheckUtils]: 26: Hoare triple {47711#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,828 INFO L273 TraceCheckUtils]: 27: Hoare triple {47711#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,828 INFO L273 TraceCheckUtils]: 28: Hoare triple {47711#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {47711#true} is VALID [2018-11-23 12:48:36,828 INFO L273 TraceCheckUtils]: 29: Hoare triple {47711#true} ~skip~0 := 0; {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 30: Hoare triple {47711#true} assume !false; {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 31: Hoare triple {47711#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 32: Hoare triple {47711#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 33: Hoare triple {47711#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 34: Hoare triple {47711#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 35: Hoare triple {47711#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,829 INFO L273 TraceCheckUtils]: 36: Hoare triple {47711#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,830 INFO L273 TraceCheckUtils]: 37: Hoare triple {47711#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,830 INFO L273 TraceCheckUtils]: 38: Hoare triple {47711#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,830 INFO L273 TraceCheckUtils]: 39: Hoare triple {47711#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,830 INFO L273 TraceCheckUtils]: 40: Hoare triple {47711#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,830 INFO L273 TraceCheckUtils]: 41: Hoare triple {47711#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,830 INFO L273 TraceCheckUtils]: 42: Hoare triple {47711#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47711#true} is VALID [2018-11-23 12:48:36,831 INFO L273 TraceCheckUtils]: 43: Hoare triple {47711#true} assume 8496 == #t~mem35;havoc #t~mem35; {47711#true} is VALID [2018-11-23 12:48:36,831 INFO L273 TraceCheckUtils]: 44: Hoare triple {47711#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {47711#true} is VALID [2018-11-23 12:48:36,848 INFO L273 TraceCheckUtils]: 45: Hoare triple {47711#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,856 INFO L273 TraceCheckUtils]: 46: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,869 INFO L273 TraceCheckUtils]: 47: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,882 INFO L273 TraceCheckUtils]: 48: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,894 INFO L273 TraceCheckUtils]: 49: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,909 INFO L273 TraceCheckUtils]: 50: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,917 INFO L273 TraceCheckUtils]: 51: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,930 INFO L273 TraceCheckUtils]: 52: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,943 INFO L273 TraceCheckUtils]: 53: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,955 INFO L273 TraceCheckUtils]: 54: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,968 INFO L273 TraceCheckUtils]: 55: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,982 INFO L273 TraceCheckUtils]: 56: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:36,990 INFO L273 TraceCheckUtils]: 57: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,003 INFO L273 TraceCheckUtils]: 58: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,016 INFO L273 TraceCheckUtils]: 59: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,033 INFO L273 TraceCheckUtils]: 60: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,041 INFO L273 TraceCheckUtils]: 61: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,051 INFO L273 TraceCheckUtils]: 62: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,051 INFO L273 TraceCheckUtils]: 63: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,052 INFO L273 TraceCheckUtils]: 64: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,052 INFO L273 TraceCheckUtils]: 65: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,054 INFO L273 TraceCheckUtils]: 66: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,054 INFO L273 TraceCheckUtils]: 67: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume 8512 == #t~mem37;havoc #t~mem37; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,056 INFO L273 TraceCheckUtils]: 68: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,056 INFO L273 TraceCheckUtils]: 69: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;~skip~0 := 1; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,058 INFO L273 TraceCheckUtils]: 70: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,058 INFO L273 TraceCheckUtils]: 71: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,058 INFO L273 TraceCheckUtils]: 72: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,059 INFO L273 TraceCheckUtils]: 73: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,059 INFO L273 TraceCheckUtils]: 74: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,059 INFO L273 TraceCheckUtils]: 75: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,059 INFO L273 TraceCheckUtils]: 76: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,060 INFO L273 TraceCheckUtils]: 77: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,060 INFO L273 TraceCheckUtils]: 78: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,060 INFO L273 TraceCheckUtils]: 79: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,061 INFO L273 TraceCheckUtils]: 80: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,061 INFO L273 TraceCheckUtils]: 81: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,061 INFO L273 TraceCheckUtils]: 82: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,062 INFO L273 TraceCheckUtils]: 83: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,062 INFO L273 TraceCheckUtils]: 84: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,062 INFO L273 TraceCheckUtils]: 85: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,062 INFO L273 TraceCheckUtils]: 86: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,063 INFO L273 TraceCheckUtils]: 87: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,063 INFO L273 TraceCheckUtils]: 88: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,064 INFO L273 TraceCheckUtils]: 89: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,064 INFO L273 TraceCheckUtils]: 90: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,065 INFO L273 TraceCheckUtils]: 91: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,065 INFO L273 TraceCheckUtils]: 92: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,066 INFO L273 TraceCheckUtils]: 93: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume 8544 == #t~mem41;havoc #t~mem41; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,066 INFO L273 TraceCheckUtils]: 94: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,067 INFO L273 TraceCheckUtils]: 95: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,067 INFO L273 TraceCheckUtils]: 96: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,068 INFO L273 TraceCheckUtils]: 97: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,068 INFO L273 TraceCheckUtils]: 98: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,069 INFO L273 TraceCheckUtils]: 99: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {47713#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:37,069 INFO L273 TraceCheckUtils]: 100: Hoare triple {47713#(<= ssl3_accept_~blastFlag~0 2)} assume 8 == ~blastFlag~0; {47712#false} is VALID [2018-11-23 12:48:37,070 INFO L273 TraceCheckUtils]: 101: Hoare triple {47712#false} assume !false; {47712#false} is VALID [2018-11-23 12:48:37,076 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 12:48:37,076 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:37,076 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:37,076 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 102 [2018-11-23 12:48:37,077 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:37,077 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:37,147 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:37,147 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:37,148 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:37,148 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:37,148 INFO L87 Difference]: Start difference. First operand 260 states and 379 transitions. Second operand 3 states. [2018-11-23 12:48:38,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:38,012 INFO L93 Difference]: Finished difference Result 728 states and 1080 transitions. [2018-11-23 12:48:38,012 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:48:38,012 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 102 [2018-11-23 12:48:38,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:38,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:38,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 604 transitions. [2018-11-23 12:48:38,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:38,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 604 transitions. [2018-11-23 12:48:38,017 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 604 transitions. [2018-11-23 12:48:38,590 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 604 edges. 604 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:38,604 INFO L225 Difference]: With dead ends: 728 [2018-11-23 12:48:38,604 INFO L226 Difference]: Without dead ends: 493 [2018-11-23 12:48:38,605 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:38,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2018-11-23 12:48:38,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 493. [2018-11-23 12:48:38,947 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:38,947 INFO L82 GeneralOperation]: Start isEquivalent. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:38,947 INFO L74 IsIncluded]: Start isIncluded. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:38,947 INFO L87 Difference]: Start difference. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:38,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:38,959 INFO L93 Difference]: Finished difference Result 493 states and 723 transitions. [2018-11-23 12:48:38,959 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 12:48:38,960 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:38,960 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:38,960 INFO L74 IsIncluded]: Start isIncluded. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:38,960 INFO L87 Difference]: Start difference. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:38,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:38,971 INFO L93 Difference]: Finished difference Result 493 states and 723 transitions. [2018-11-23 12:48:38,971 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 12:48:38,971 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:38,972 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:38,972 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:38,972 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:38,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 493 states. [2018-11-23 12:48:38,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 493 states to 493 states and 723 transitions. [2018-11-23 12:48:38,982 INFO L78 Accepts]: Start accepts. Automaton has 493 states and 723 transitions. Word has length 102 [2018-11-23 12:48:38,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:38,983 INFO L480 AbstractCegarLoop]: Abstraction has 493 states and 723 transitions. [2018-11-23 12:48:38,983 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:48:38,983 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 12:48:38,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:48:38,983 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:38,983 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:38,983 INFO L423 AbstractCegarLoop]: === Iteration 39 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:38,984 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:38,984 INFO L82 PathProgramCache]: Analyzing trace with hash 1725725933, now seen corresponding path program 1 times [2018-11-23 12:48:38,984 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:38,984 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:38,985 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:38,985 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:38,985 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:38,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:39,172 INFO L256 TraceCheckUtils]: 0: Hoare triple {50095#true} call ULTIMATE.init(); {50095#true} is VALID [2018-11-23 12:48:39,172 INFO L273 TraceCheckUtils]: 1: Hoare triple {50095#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,172 INFO L273 TraceCheckUtils]: 2: Hoare triple {50095#true} assume true; {50095#true} is VALID [2018-11-23 12:48:39,172 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {50095#true} {50095#true} #632#return; {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L256 TraceCheckUtils]: 4: Hoare triple {50095#true} call #t~ret138 := main(); {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 5: Hoare triple {50095#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L256 TraceCheckUtils]: 6: Hoare triple {50095#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 7: Hoare triple {50095#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 8: Hoare triple {50095#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 9: Hoare triple {50095#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 10: Hoare triple {50095#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 11: Hoare triple {50095#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,173 INFO L273 TraceCheckUtils]: 12: Hoare triple {50095#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 13: Hoare triple {50095#true} assume !false; {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 14: Hoare triple {50095#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 15: Hoare triple {50095#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 16: Hoare triple {50095#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 17: Hoare triple {50095#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 18: Hoare triple {50095#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 19: Hoare triple {50095#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,176 INFO L273 TraceCheckUtils]: 20: Hoare triple {50095#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 21: Hoare triple {50095#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 22: Hoare triple {50095#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 23: Hoare triple {50095#true} assume 8464 == #t~mem32;havoc #t~mem32; {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 24: Hoare triple {50095#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 25: Hoare triple {50095#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 26: Hoare triple {50095#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,177 INFO L273 TraceCheckUtils]: 27: Hoare triple {50095#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,178 INFO L273 TraceCheckUtils]: 28: Hoare triple {50095#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {50095#true} is VALID [2018-11-23 12:48:39,178 INFO L273 TraceCheckUtils]: 29: Hoare triple {50095#true} ~skip~0 := 0; {50095#true} is VALID [2018-11-23 12:48:39,178 INFO L273 TraceCheckUtils]: 30: Hoare triple {50095#true} assume !false; {50095#true} is VALID [2018-11-23 12:48:39,178 INFO L273 TraceCheckUtils]: 31: Hoare triple {50095#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,178 INFO L273 TraceCheckUtils]: 32: Hoare triple {50095#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,178 INFO L273 TraceCheckUtils]: 33: Hoare triple {50095#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 34: Hoare triple {50095#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 35: Hoare triple {50095#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 36: Hoare triple {50095#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 37: Hoare triple {50095#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 38: Hoare triple {50095#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 39: Hoare triple {50095#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,179 INFO L273 TraceCheckUtils]: 40: Hoare triple {50095#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,180 INFO L273 TraceCheckUtils]: 41: Hoare triple {50095#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,180 INFO L273 TraceCheckUtils]: 42: Hoare triple {50095#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,180 INFO L273 TraceCheckUtils]: 43: Hoare triple {50095#true} assume 8496 == #t~mem35;havoc #t~mem35; {50095#true} is VALID [2018-11-23 12:48:39,180 INFO L273 TraceCheckUtils]: 44: Hoare triple {50095#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {50095#true} is VALID [2018-11-23 12:48:39,180 INFO L273 TraceCheckUtils]: 45: Hoare triple {50095#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {50095#true} is VALID [2018-11-23 12:48:39,180 INFO L273 TraceCheckUtils]: 46: Hoare triple {50095#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 47: Hoare triple {50095#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 48: Hoare triple {50095#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 49: Hoare triple {50095#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 50: Hoare triple {50095#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 51: Hoare triple {50095#true} ~skip~0 := 0; {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 52: Hoare triple {50095#true} assume !false; {50095#true} is VALID [2018-11-23 12:48:39,181 INFO L273 TraceCheckUtils]: 53: Hoare triple {50095#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,182 INFO L273 TraceCheckUtils]: 54: Hoare triple {50095#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,182 INFO L273 TraceCheckUtils]: 55: Hoare triple {50095#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,182 INFO L273 TraceCheckUtils]: 56: Hoare triple {50095#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,182 INFO L273 TraceCheckUtils]: 57: Hoare triple {50095#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,182 INFO L273 TraceCheckUtils]: 58: Hoare triple {50095#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,182 INFO L273 TraceCheckUtils]: 59: Hoare triple {50095#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 60: Hoare triple {50095#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 61: Hoare triple {50095#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 62: Hoare triple {50095#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 63: Hoare triple {50095#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 64: Hoare triple {50095#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 65: Hoare triple {50095#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,183 INFO L273 TraceCheckUtils]: 66: Hoare triple {50095#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,184 INFO L273 TraceCheckUtils]: 67: Hoare triple {50095#true} assume 8512 == #t~mem37;havoc #t~mem37; {50095#true} is VALID [2018-11-23 12:48:39,184 INFO L273 TraceCheckUtils]: 68: Hoare triple {50095#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {50095#true} is VALID [2018-11-23 12:48:39,184 INFO L273 TraceCheckUtils]: 69: Hoare triple {50095#true} assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {50095#true} is VALID [2018-11-23 12:48:39,185 INFO L273 TraceCheckUtils]: 70: Hoare triple {50095#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 6; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,186 INFO L273 TraceCheckUtils]: 71: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(~ret~0 <= 0); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,186 INFO L273 TraceCheckUtils]: 72: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,188 INFO L273 TraceCheckUtils]: 73: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,188 INFO L273 TraceCheckUtils]: 74: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,190 INFO L273 TraceCheckUtils]: 75: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} ~skip~0 := 0; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,190 INFO L273 TraceCheckUtils]: 76: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !false; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,192 INFO L273 TraceCheckUtils]: 77: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,192 INFO L273 TraceCheckUtils]: 78: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,194 INFO L273 TraceCheckUtils]: 79: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,194 INFO L273 TraceCheckUtils]: 80: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,196 INFO L273 TraceCheckUtils]: 81: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,196 INFO L273 TraceCheckUtils]: 82: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,199 INFO L273 TraceCheckUtils]: 83: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,199 INFO L273 TraceCheckUtils]: 84: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,201 INFO L273 TraceCheckUtils]: 85: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,201 INFO L273 TraceCheckUtils]: 86: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,201 INFO L273 TraceCheckUtils]: 87: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,202 INFO L273 TraceCheckUtils]: 88: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,203 INFO L273 TraceCheckUtils]: 89: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,203 INFO L273 TraceCheckUtils]: 90: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,203 INFO L273 TraceCheckUtils]: 91: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,204 INFO L273 TraceCheckUtils]: 92: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,204 INFO L273 TraceCheckUtils]: 93: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,204 INFO L273 TraceCheckUtils]: 94: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,205 INFO L273 TraceCheckUtils]: 95: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume 8544 == #t~mem41;havoc #t~mem41; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,205 INFO L273 TraceCheckUtils]: 96: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,206 INFO L273 TraceCheckUtils]: 97: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,206 INFO L273 TraceCheckUtils]: 98: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,207 INFO L273 TraceCheckUtils]: 99: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,207 INFO L273 TraceCheckUtils]: 100: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,208 INFO L273 TraceCheckUtils]: 101: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {50097#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:39,208 INFO L273 TraceCheckUtils]: 102: Hoare triple {50097#(<= ssl3_accept_~blastFlag~0 6)} assume 8 == ~blastFlag~0; {50096#false} is VALID [2018-11-23 12:48:39,208 INFO L273 TraceCheckUtils]: 103: Hoare triple {50096#false} assume !false; {50096#false} is VALID [2018-11-23 12:48:39,214 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:48:39,214 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:39,214 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:39,215 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 12:48:39,215 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:39,215 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:39,288 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:39,288 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:39,288 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:39,288 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:39,288 INFO L87 Difference]: Start difference. First operand 493 states and 723 transitions. Second operand 3 states. [2018-11-23 12:48:40,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:40,342 INFO L93 Difference]: Finished difference Result 1196 states and 1769 transitions. [2018-11-23 12:48:40,342 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:48:40,342 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 12:48:40,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:40,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:40,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 605 transitions. [2018-11-23 12:48:40,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:40,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 605 transitions. [2018-11-23 12:48:40,347 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 605 transitions. [2018-11-23 12:48:40,947 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 605 edges. 605 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:40,974 INFO L225 Difference]: With dead ends: 1196 [2018-11-23 12:48:40,975 INFO L226 Difference]: Without dead ends: 728 [2018-11-23 12:48:40,975 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:40,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 728 states. [2018-11-23 12:48:41,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 728 to 726. [2018-11-23 12:48:41,571 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:41,571 INFO L82 GeneralOperation]: Start isEquivalent. First operand 728 states. Second operand 726 states. [2018-11-23 12:48:41,571 INFO L74 IsIncluded]: Start isIncluded. First operand 728 states. Second operand 726 states. [2018-11-23 12:48:41,571 INFO L87 Difference]: Start difference. First operand 728 states. Second operand 726 states. [2018-11-23 12:48:41,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:41,593 INFO L93 Difference]: Finished difference Result 728 states and 1072 transitions. [2018-11-23 12:48:41,593 INFO L276 IsEmpty]: Start isEmpty. Operand 728 states and 1072 transitions. [2018-11-23 12:48:41,593 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:41,593 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:41,594 INFO L74 IsIncluded]: Start isIncluded. First operand 726 states. Second operand 728 states. [2018-11-23 12:48:41,594 INFO L87 Difference]: Start difference. First operand 726 states. Second operand 728 states. [2018-11-23 12:48:41,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:41,621 INFO L93 Difference]: Finished difference Result 728 states and 1072 transitions. [2018-11-23 12:48:41,621 INFO L276 IsEmpty]: Start isEmpty. Operand 728 states and 1072 transitions. [2018-11-23 12:48:41,622 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:41,622 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:41,622 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:41,623 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:41,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 726 states. [2018-11-23 12:48:41,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 726 states to 726 states and 1071 transitions. [2018-11-23 12:48:41,653 INFO L78 Accepts]: Start accepts. Automaton has 726 states and 1071 transitions. Word has length 104 [2018-11-23 12:48:41,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:41,653 INFO L480 AbstractCegarLoop]: Abstraction has 726 states and 1071 transitions. [2018-11-23 12:48:41,653 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:48:41,653 INFO L276 IsEmpty]: Start isEmpty. Operand 726 states and 1071 transitions. [2018-11-23 12:48:41,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2018-11-23 12:48:41,654 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:41,654 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:41,654 INFO L423 AbstractCegarLoop]: === Iteration 40 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:41,655 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:41,655 INFO L82 PathProgramCache]: Analyzing trace with hash 244952331, now seen corresponding path program 1 times [2018-11-23 12:48:41,655 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:41,655 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:41,656 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:41,657 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:41,657 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:41,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:41,917 INFO L256 TraceCheckUtils]: 0: Hoare triple {53744#true} call ULTIMATE.init(); {53744#true} is VALID [2018-11-23 12:48:41,917 INFO L273 TraceCheckUtils]: 1: Hoare triple {53744#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,917 INFO L273 TraceCheckUtils]: 2: Hoare triple {53744#true} assume true; {53744#true} is VALID [2018-11-23 12:48:41,918 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {53744#true} {53744#true} #632#return; {53744#true} is VALID [2018-11-23 12:48:41,918 INFO L256 TraceCheckUtils]: 4: Hoare triple {53744#true} call #t~ret138 := main(); {53744#true} is VALID [2018-11-23 12:48:41,918 INFO L273 TraceCheckUtils]: 5: Hoare triple {53744#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,918 INFO L256 TraceCheckUtils]: 6: Hoare triple {53744#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {53744#true} is VALID [2018-11-23 12:48:41,918 INFO L273 TraceCheckUtils]: 7: Hoare triple {53744#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,918 INFO L273 TraceCheckUtils]: 8: Hoare triple {53744#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {53744#true} is VALID [2018-11-23 12:48:41,919 INFO L273 TraceCheckUtils]: 9: Hoare triple {53744#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {53744#true} is VALID [2018-11-23 12:48:41,919 INFO L273 TraceCheckUtils]: 10: Hoare triple {53744#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {53744#true} is VALID [2018-11-23 12:48:41,919 INFO L273 TraceCheckUtils]: 11: Hoare triple {53744#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,919 INFO L273 TraceCheckUtils]: 12: Hoare triple {53744#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {53744#true} is VALID [2018-11-23 12:48:41,919 INFO L273 TraceCheckUtils]: 13: Hoare triple {53744#true} assume !false; {53744#true} is VALID [2018-11-23 12:48:41,919 INFO L273 TraceCheckUtils]: 14: Hoare triple {53744#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 15: Hoare triple {53744#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 16: Hoare triple {53744#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 17: Hoare triple {53744#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 18: Hoare triple {53744#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 19: Hoare triple {53744#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 20: Hoare triple {53744#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,920 INFO L273 TraceCheckUtils]: 21: Hoare triple {53744#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 22: Hoare triple {53744#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 23: Hoare triple {53744#true} assume 8464 == #t~mem32;havoc #t~mem32; {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 24: Hoare triple {53744#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 25: Hoare triple {53744#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 26: Hoare triple {53744#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 27: Hoare triple {53744#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,921 INFO L273 TraceCheckUtils]: 28: Hoare triple {53744#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {53744#true} is VALID [2018-11-23 12:48:41,922 INFO L273 TraceCheckUtils]: 29: Hoare triple {53744#true} ~skip~0 := 0; {53744#true} is VALID [2018-11-23 12:48:41,922 INFO L273 TraceCheckUtils]: 30: Hoare triple {53744#true} assume !false; {53744#true} is VALID [2018-11-23 12:48:41,922 INFO L273 TraceCheckUtils]: 31: Hoare triple {53744#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,922 INFO L273 TraceCheckUtils]: 32: Hoare triple {53744#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,922 INFO L273 TraceCheckUtils]: 33: Hoare triple {53744#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,922 INFO L273 TraceCheckUtils]: 34: Hoare triple {53744#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 35: Hoare triple {53744#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 36: Hoare triple {53744#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 37: Hoare triple {53744#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 38: Hoare triple {53744#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 39: Hoare triple {53744#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 40: Hoare triple {53744#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,923 INFO L273 TraceCheckUtils]: 41: Hoare triple {53744#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 42: Hoare triple {53744#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 43: Hoare triple {53744#true} assume 8496 == #t~mem35;havoc #t~mem35; {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 44: Hoare triple {53744#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 45: Hoare triple {53744#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 46: Hoare triple {53744#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 47: Hoare triple {53744#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,924 INFO L273 TraceCheckUtils]: 48: Hoare triple {53744#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,925 INFO L273 TraceCheckUtils]: 49: Hoare triple {53744#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,925 INFO L273 TraceCheckUtils]: 50: Hoare triple {53744#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {53744#true} is VALID [2018-11-23 12:48:41,925 INFO L273 TraceCheckUtils]: 51: Hoare triple {53744#true} ~skip~0 := 0; {53744#true} is VALID [2018-11-23 12:48:41,925 INFO L273 TraceCheckUtils]: 52: Hoare triple {53744#true} assume !false; {53744#true} is VALID [2018-11-23 12:48:41,925 INFO L273 TraceCheckUtils]: 53: Hoare triple {53744#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,925 INFO L273 TraceCheckUtils]: 54: Hoare triple {53744#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 55: Hoare triple {53744#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 56: Hoare triple {53744#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 57: Hoare triple {53744#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 58: Hoare triple {53744#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 59: Hoare triple {53744#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 60: Hoare triple {53744#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,926 INFO L273 TraceCheckUtils]: 61: Hoare triple {53744#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,927 INFO L273 TraceCheckUtils]: 62: Hoare triple {53744#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,927 INFO L273 TraceCheckUtils]: 63: Hoare triple {53744#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,927 INFO L273 TraceCheckUtils]: 64: Hoare triple {53744#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,927 INFO L273 TraceCheckUtils]: 65: Hoare triple {53744#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,927 INFO L273 TraceCheckUtils]: 66: Hoare triple {53744#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,927 INFO L273 TraceCheckUtils]: 67: Hoare triple {53744#true} assume 8512 == #t~mem37;havoc #t~mem37; {53744#true} is VALID [2018-11-23 12:48:41,928 INFO L273 TraceCheckUtils]: 68: Hoare triple {53744#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {53744#true} is VALID [2018-11-23 12:48:41,928 INFO L273 TraceCheckUtils]: 69: Hoare triple {53744#true} assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {53744#true} is VALID [2018-11-23 12:48:41,940 INFO L273 TraceCheckUtils]: 70: Hoare triple {53744#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 6; {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:41,953 INFO L273 TraceCheckUtils]: 71: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(~ret~0 <= 0); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:41,965 INFO L273 TraceCheckUtils]: 72: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:41,978 INFO L273 TraceCheckUtils]: 73: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:41,991 INFO L273 TraceCheckUtils]: 74: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,003 INFO L273 TraceCheckUtils]: 75: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} ~skip~0 := 0; {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,016 INFO L273 TraceCheckUtils]: 76: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !false; {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,029 INFO L273 TraceCheckUtils]: 77: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,047 INFO L273 TraceCheckUtils]: 78: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,056 INFO L273 TraceCheckUtils]: 79: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,063 INFO L273 TraceCheckUtils]: 80: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,063 INFO L273 TraceCheckUtils]: 81: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,064 INFO L273 TraceCheckUtils]: 82: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,069 INFO L273 TraceCheckUtils]: 83: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,072 INFO L273 TraceCheckUtils]: 84: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,072 INFO L273 TraceCheckUtils]: 85: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,072 INFO L273 TraceCheckUtils]: 86: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,073 INFO L273 TraceCheckUtils]: 87: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,073 INFO L273 TraceCheckUtils]: 88: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,073 INFO L273 TraceCheckUtils]: 89: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,074 INFO L273 TraceCheckUtils]: 90: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,074 INFO L273 TraceCheckUtils]: 91: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,074 INFO L273 TraceCheckUtils]: 92: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,074 INFO L273 TraceCheckUtils]: 93: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,075 INFO L273 TraceCheckUtils]: 94: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,075 INFO L273 TraceCheckUtils]: 95: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,075 INFO L273 TraceCheckUtils]: 96: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,076 INFO L273 TraceCheckUtils]: 97: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,076 INFO L273 TraceCheckUtils]: 98: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,076 INFO L273 TraceCheckUtils]: 99: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,077 INFO L273 TraceCheckUtils]: 100: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,077 INFO L273 TraceCheckUtils]: 101: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,078 INFO L273 TraceCheckUtils]: 102: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,078 INFO L273 TraceCheckUtils]: 103: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,079 INFO L273 TraceCheckUtils]: 104: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,079 INFO L273 TraceCheckUtils]: 105: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,080 INFO L273 TraceCheckUtils]: 106: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume 8640 == #t~mem52;havoc #t~mem52; {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,080 INFO L273 TraceCheckUtils]: 107: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {53746#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:48:42,081 INFO L273 TraceCheckUtils]: 108: Hoare triple {53746#(<= 6 ssl3_accept_~blastFlag~0)} assume 4 == ~blastFlag~0; {53745#false} is VALID [2018-11-23 12:48:42,081 INFO L273 TraceCheckUtils]: 109: Hoare triple {53745#false} assume !false; {53745#false} is VALID [2018-11-23 12:48:42,088 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:48:42,089 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:42,089 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:42,089 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 110 [2018-11-23 12:48:42,089 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:42,089 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:42,175 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:42,175 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:42,175 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:42,175 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:42,176 INFO L87 Difference]: Start difference. First operand 726 states and 1071 transitions. Second operand 3 states. [2018-11-23 12:48:44,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:44,295 INFO L93 Difference]: Finished difference Result 1662 states and 2463 transitions. [2018-11-23 12:48:44,295 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:48:44,295 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 110 [2018-11-23 12:48:44,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:44,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:44,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-23 12:48:44,298 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:44,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-23 12:48:44,300 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 603 transitions. [2018-11-23 12:48:44,910 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:44,955 INFO L225 Difference]: With dead ends: 1662 [2018-11-23 12:48:44,955 INFO L226 Difference]: Without dead ends: 961 [2018-11-23 12:48:44,956 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:44,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 961 states. [2018-11-23 12:48:46,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 961 to 959. [2018-11-23 12:48:46,659 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:46,659 INFO L82 GeneralOperation]: Start isEquivalent. First operand 961 states. Second operand 959 states. [2018-11-23 12:48:46,659 INFO L74 IsIncluded]: Start isIncluded. First operand 961 states. Second operand 959 states. [2018-11-23 12:48:46,659 INFO L87 Difference]: Start difference. First operand 961 states. Second operand 959 states. [2018-11-23 12:48:46,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:46,696 INFO L93 Difference]: Finished difference Result 961 states and 1406 transitions. [2018-11-23 12:48:46,696 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1406 transitions. [2018-11-23 12:48:46,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:46,697 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:46,697 INFO L74 IsIncluded]: Start isIncluded. First operand 959 states. Second operand 961 states. [2018-11-23 12:48:46,697 INFO L87 Difference]: Start difference. First operand 959 states. Second operand 961 states. [2018-11-23 12:48:46,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:46,728 INFO L93 Difference]: Finished difference Result 961 states and 1406 transitions. [2018-11-23 12:48:46,728 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1406 transitions. [2018-11-23 12:48:46,729 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:46,729 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:46,729 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:46,729 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:46,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 959 states. [2018-11-23 12:48:46,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 959 states to 959 states and 1405 transitions. [2018-11-23 12:48:46,762 INFO L78 Accepts]: Start accepts. Automaton has 959 states and 1405 transitions. Word has length 110 [2018-11-23 12:48:46,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:46,762 INFO L480 AbstractCegarLoop]: Abstraction has 959 states and 1405 transitions. [2018-11-23 12:48:46,762 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:48:46,762 INFO L276 IsEmpty]: Start isEmpty. Operand 959 states and 1405 transitions. [2018-11-23 12:48:46,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 128 [2018-11-23 12:48:46,763 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:46,763 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:46,764 INFO L423 AbstractCegarLoop]: === Iteration 41 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:46,764 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:46,764 INFO L82 PathProgramCache]: Analyzing trace with hash -1740119302, now seen corresponding path program 1 times [2018-11-23 12:48:46,764 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:46,764 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:46,765 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:46,765 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:46,765 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:46,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:46,980 INFO L256 TraceCheckUtils]: 0: Hoare triple {58651#true} call ULTIMATE.init(); {58651#true} is VALID [2018-11-23 12:48:46,980 INFO L273 TraceCheckUtils]: 1: Hoare triple {58651#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L273 TraceCheckUtils]: 2: Hoare triple {58651#true} assume true; {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {58651#true} {58651#true} #632#return; {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L256 TraceCheckUtils]: 4: Hoare triple {58651#true} call #t~ret138 := main(); {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L273 TraceCheckUtils]: 5: Hoare triple {58651#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L256 TraceCheckUtils]: 6: Hoare triple {58651#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L273 TraceCheckUtils]: 7: Hoare triple {58651#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,981 INFO L273 TraceCheckUtils]: 8: Hoare triple {58651#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {58651#true} is VALID [2018-11-23 12:48:46,982 INFO L273 TraceCheckUtils]: 9: Hoare triple {58651#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {58651#true} is VALID [2018-11-23 12:48:46,982 INFO L273 TraceCheckUtils]: 10: Hoare triple {58651#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {58651#true} is VALID [2018-11-23 12:48:46,982 INFO L273 TraceCheckUtils]: 11: Hoare triple {58651#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,982 INFO L273 TraceCheckUtils]: 12: Hoare triple {58651#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {58651#true} is VALID [2018-11-23 12:48:46,982 INFO L273 TraceCheckUtils]: 13: Hoare triple {58651#true} assume !false; {58651#true} is VALID [2018-11-23 12:48:46,982 INFO L273 TraceCheckUtils]: 14: Hoare triple {58651#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,983 INFO L273 TraceCheckUtils]: 15: Hoare triple {58651#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,983 INFO L273 TraceCheckUtils]: 16: Hoare triple {58651#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,983 INFO L273 TraceCheckUtils]: 17: Hoare triple {58651#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,983 INFO L273 TraceCheckUtils]: 18: Hoare triple {58651#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,983 INFO L273 TraceCheckUtils]: 19: Hoare triple {58651#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,983 INFO L273 TraceCheckUtils]: 20: Hoare triple {58651#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 21: Hoare triple {58651#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 22: Hoare triple {58651#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 23: Hoare triple {58651#true} assume 8464 == #t~mem32;havoc #t~mem32; {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 24: Hoare triple {58651#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 25: Hoare triple {58651#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 26: Hoare triple {58651#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 27: Hoare triple {58651#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 28: Hoare triple {58651#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {58651#true} is VALID [2018-11-23 12:48:46,984 INFO L273 TraceCheckUtils]: 29: Hoare triple {58651#true} ~skip~0 := 0; {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 30: Hoare triple {58651#true} assume !false; {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 31: Hoare triple {58651#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 32: Hoare triple {58651#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 33: Hoare triple {58651#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 34: Hoare triple {58651#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 35: Hoare triple {58651#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 36: Hoare triple {58651#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 37: Hoare triple {58651#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,985 INFO L273 TraceCheckUtils]: 38: Hoare triple {58651#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 39: Hoare triple {58651#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 40: Hoare triple {58651#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 41: Hoare triple {58651#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 42: Hoare triple {58651#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 43: Hoare triple {58651#true} assume 8496 == #t~mem35;havoc #t~mem35; {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 44: Hoare triple {58651#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 45: Hoare triple {58651#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 46: Hoare triple {58651#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,986 INFO L273 TraceCheckUtils]: 47: Hoare triple {58651#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 48: Hoare triple {58651#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 49: Hoare triple {58651#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 50: Hoare triple {58651#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 51: Hoare triple {58651#true} ~skip~0 := 0; {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 52: Hoare triple {58651#true} assume !false; {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 53: Hoare triple {58651#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 54: Hoare triple {58651#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 55: Hoare triple {58651#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,987 INFO L273 TraceCheckUtils]: 56: Hoare triple {58651#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 57: Hoare triple {58651#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 58: Hoare triple {58651#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 59: Hoare triple {58651#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 60: Hoare triple {58651#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 61: Hoare triple {58651#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 62: Hoare triple {58651#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 63: Hoare triple {58651#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 64: Hoare triple {58651#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,988 INFO L273 TraceCheckUtils]: 65: Hoare triple {58651#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 66: Hoare triple {58651#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 67: Hoare triple {58651#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 68: Hoare triple {58651#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 69: Hoare triple {58651#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 70: Hoare triple {58651#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 71: Hoare triple {58651#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,989 INFO L273 TraceCheckUtils]: 72: Hoare triple {58651#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,990 INFO L273 TraceCheckUtils]: 73: Hoare triple {58651#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,990 INFO L273 TraceCheckUtils]: 74: Hoare triple {58651#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,990 INFO L273 TraceCheckUtils]: 75: Hoare triple {58651#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,990 INFO L273 TraceCheckUtils]: 76: Hoare triple {58651#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,990 INFO L273 TraceCheckUtils]: 77: Hoare triple {58651#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,991 INFO L273 TraceCheckUtils]: 78: Hoare triple {58651#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,991 INFO L273 TraceCheckUtils]: 79: Hoare triple {58651#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,991 INFO L273 TraceCheckUtils]: 80: Hoare triple {58651#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,991 INFO L273 TraceCheckUtils]: 81: Hoare triple {58651#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,991 INFO L273 TraceCheckUtils]: 82: Hoare triple {58651#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,991 INFO L273 TraceCheckUtils]: 83: Hoare triple {58651#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {58651#true} is VALID [2018-11-23 12:48:46,992 INFO L273 TraceCheckUtils]: 84: Hoare triple {58651#true} assume 8656 == #t~mem54;havoc #t~mem54; {58651#true} is VALID [2018-11-23 12:48:46,992 INFO L273 TraceCheckUtils]: 85: Hoare triple {58651#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {58651#true} is VALID [2018-11-23 12:48:46,992 INFO L273 TraceCheckUtils]: 86: Hoare triple {58651#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {58651#true} is VALID [2018-11-23 12:48:46,992 INFO L273 TraceCheckUtils]: 87: Hoare triple {58651#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {58651#true} is VALID [2018-11-23 12:48:47,004 INFO L273 TraceCheckUtils]: 88: Hoare triple {58651#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,019 INFO L273 TraceCheckUtils]: 89: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == ~tmp___10~0); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,027 INFO L273 TraceCheckUtils]: 90: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,045 INFO L273 TraceCheckUtils]: 91: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,060 INFO L273 TraceCheckUtils]: 92: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,070 INFO L273 TraceCheckUtils]: 93: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,082 INFO L273 TraceCheckUtils]: 94: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,095 INFO L273 TraceCheckUtils]: 95: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,107 INFO L273 TraceCheckUtils]: 96: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,122 INFO L273 TraceCheckUtils]: 97: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,131 INFO L273 TraceCheckUtils]: 98: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,143 INFO L273 TraceCheckUtils]: 99: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,158 INFO L273 TraceCheckUtils]: 100: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,166 INFO L273 TraceCheckUtils]: 101: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,184 INFO L273 TraceCheckUtils]: 102: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,192 INFO L273 TraceCheckUtils]: 103: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,205 INFO L273 TraceCheckUtils]: 104: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,218 INFO L273 TraceCheckUtils]: 105: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,230 INFO L273 TraceCheckUtils]: 106: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,250 INFO L273 TraceCheckUtils]: 107: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,259 INFO L273 TraceCheckUtils]: 108: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,274 INFO L273 TraceCheckUtils]: 109: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,283 INFO L273 TraceCheckUtils]: 110: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,291 INFO L273 TraceCheckUtils]: 111: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,292 INFO L273 TraceCheckUtils]: 112: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,292 INFO L273 TraceCheckUtils]: 113: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,295 INFO L273 TraceCheckUtils]: 114: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,295 INFO L273 TraceCheckUtils]: 115: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,298 INFO L273 TraceCheckUtils]: 116: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,298 INFO L273 TraceCheckUtils]: 117: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,301 INFO L273 TraceCheckUtils]: 118: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,301 INFO L273 TraceCheckUtils]: 119: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,301 INFO L273 TraceCheckUtils]: 120: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,302 INFO L273 TraceCheckUtils]: 121: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,302 INFO L273 TraceCheckUtils]: 122: Hoare triple {58653#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {58654#(= 8672 |ssl3_accept_#t~mem52|)} is VALID [2018-11-23 12:48:47,302 INFO L273 TraceCheckUtils]: 123: Hoare triple {58654#(= 8672 |ssl3_accept_#t~mem52|)} assume 8640 == #t~mem52;havoc #t~mem52; {58652#false} is VALID [2018-11-23 12:48:47,303 INFO L273 TraceCheckUtils]: 124: Hoare triple {58652#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {58652#false} is VALID [2018-11-23 12:48:47,303 INFO L273 TraceCheckUtils]: 125: Hoare triple {58652#false} assume 4 == ~blastFlag~0; {58652#false} is VALID [2018-11-23 12:48:47,303 INFO L273 TraceCheckUtils]: 126: Hoare triple {58652#false} assume !false; {58652#false} is VALID [2018-11-23 12:48:47,315 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:48:47,315 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:47,315 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:47,315 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 127 [2018-11-23 12:48:47,315 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:47,315 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:47,421 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:47,421 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:47,421 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:47,422 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:47,422 INFO L87 Difference]: Start difference. First operand 959 states and 1405 transitions. Second operand 4 states. [2018-11-23 12:48:50,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:50,346 INFO L93 Difference]: Finished difference Result 2295 states and 3391 transitions. [2018-11-23 12:48:50,346 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:50,346 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 127 [2018-11-23 12:48:50,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:50,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:50,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 565 transitions. [2018-11-23 12:48:50,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:50,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 565 transitions. [2018-11-23 12:48:50,350 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 565 transitions. [2018-11-23 12:48:50,941 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 565 edges. 565 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:51,016 INFO L225 Difference]: With dead ends: 2295 [2018-11-23 12:48:51,016 INFO L226 Difference]: Without dead ends: 1361 [2018-11-23 12:48:51,017 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:51,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1361 states. [2018-11-23 12:48:52,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1361 to 1115. [2018-11-23 12:48:52,029 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:52,029 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1361 states. Second operand 1115 states. [2018-11-23 12:48:52,029 INFO L74 IsIncluded]: Start isIncluded. First operand 1361 states. Second operand 1115 states. [2018-11-23 12:48:52,029 INFO L87 Difference]: Start difference. First operand 1361 states. Second operand 1115 states. [2018-11-23 12:48:52,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:52,087 INFO L93 Difference]: Finished difference Result 1361 states and 2010 transitions. [2018-11-23 12:48:52,088 INFO L276 IsEmpty]: Start isEmpty. Operand 1361 states and 2010 transitions. [2018-11-23 12:48:52,088 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:52,088 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:52,089 INFO L74 IsIncluded]: Start isIncluded. First operand 1115 states. Second operand 1361 states. [2018-11-23 12:48:52,089 INFO L87 Difference]: Start difference. First operand 1115 states. Second operand 1361 states. [2018-11-23 12:48:52,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:52,141 INFO L93 Difference]: Finished difference Result 1361 states and 2010 transitions. [2018-11-23 12:48:52,141 INFO L276 IsEmpty]: Start isEmpty. Operand 1361 states and 2010 transitions. [2018-11-23 12:48:52,142 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:52,142 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:52,142 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:52,142 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:52,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1115 states. [2018-11-23 12:48:52,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1115 states to 1115 states and 1689 transitions. [2018-11-23 12:48:52,183 INFO L78 Accepts]: Start accepts. Automaton has 1115 states and 1689 transitions. Word has length 127 [2018-11-23 12:48:52,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:52,183 INFO L480 AbstractCegarLoop]: Abstraction has 1115 states and 1689 transitions. [2018-11-23 12:48:52,184 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:52,184 INFO L276 IsEmpty]: Start isEmpty. Operand 1115 states and 1689 transitions. [2018-11-23 12:48:52,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2018-11-23 12:48:52,184 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:52,185 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:52,185 INFO L423 AbstractCegarLoop]: === Iteration 42 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:52,185 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:52,185 INFO L82 PathProgramCache]: Analyzing trace with hash 1883869130, now seen corresponding path program 1 times [2018-11-23 12:48:52,185 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:52,185 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:52,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:52,186 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:52,186 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:52,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:52,335 INFO L256 TraceCheckUtils]: 0: Hoare triple {65269#true} call ULTIMATE.init(); {65269#true} is VALID [2018-11-23 12:48:52,336 INFO L273 TraceCheckUtils]: 1: Hoare triple {65269#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,336 INFO L273 TraceCheckUtils]: 2: Hoare triple {65269#true} assume true; {65269#true} is VALID [2018-11-23 12:48:52,336 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {65269#true} {65269#true} #632#return; {65269#true} is VALID [2018-11-23 12:48:52,336 INFO L256 TraceCheckUtils]: 4: Hoare triple {65269#true} call #t~ret138 := main(); {65269#true} is VALID [2018-11-23 12:48:52,336 INFO L273 TraceCheckUtils]: 5: Hoare triple {65269#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,337 INFO L256 TraceCheckUtils]: 6: Hoare triple {65269#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {65269#true} is VALID [2018-11-23 12:48:52,337 INFO L273 TraceCheckUtils]: 7: Hoare triple {65269#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,337 INFO L273 TraceCheckUtils]: 8: Hoare triple {65269#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {65269#true} is VALID [2018-11-23 12:48:52,337 INFO L273 TraceCheckUtils]: 9: Hoare triple {65269#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {65269#true} is VALID [2018-11-23 12:48:52,337 INFO L273 TraceCheckUtils]: 10: Hoare triple {65269#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {65269#true} is VALID [2018-11-23 12:48:52,337 INFO L273 TraceCheckUtils]: 11: Hoare triple {65269#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,338 INFO L273 TraceCheckUtils]: 12: Hoare triple {65269#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {65269#true} is VALID [2018-11-23 12:48:52,338 INFO L273 TraceCheckUtils]: 13: Hoare triple {65269#true} assume !false; {65269#true} is VALID [2018-11-23 12:48:52,338 INFO L273 TraceCheckUtils]: 14: Hoare triple {65269#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,338 INFO L273 TraceCheckUtils]: 15: Hoare triple {65269#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,338 INFO L273 TraceCheckUtils]: 16: Hoare triple {65269#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,338 INFO L273 TraceCheckUtils]: 17: Hoare triple {65269#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 18: Hoare triple {65269#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 19: Hoare triple {65269#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 20: Hoare triple {65269#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 21: Hoare triple {65269#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 22: Hoare triple {65269#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 23: Hoare triple {65269#true} assume 8464 == #t~mem32;havoc #t~mem32; {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 24: Hoare triple {65269#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 25: Hoare triple {65269#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {65269#true} is VALID [2018-11-23 12:48:52,339 INFO L273 TraceCheckUtils]: 26: Hoare triple {65269#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 27: Hoare triple {65269#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 28: Hoare triple {65269#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 29: Hoare triple {65269#true} ~skip~0 := 0; {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 30: Hoare triple {65269#true} assume !false; {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 31: Hoare triple {65269#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 32: Hoare triple {65269#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 33: Hoare triple {65269#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 34: Hoare triple {65269#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 35: Hoare triple {65269#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,340 INFO L273 TraceCheckUtils]: 36: Hoare triple {65269#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 37: Hoare triple {65269#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 38: Hoare triple {65269#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 39: Hoare triple {65269#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 40: Hoare triple {65269#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 41: Hoare triple {65269#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 42: Hoare triple {65269#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 43: Hoare triple {65269#true} assume 8496 == #t~mem35;havoc #t~mem35; {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 44: Hoare triple {65269#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {65269#true} is VALID [2018-11-23 12:48:52,341 INFO L273 TraceCheckUtils]: 45: Hoare triple {65269#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 46: Hoare triple {65269#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 47: Hoare triple {65269#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 48: Hoare triple {65269#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 49: Hoare triple {65269#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 50: Hoare triple {65269#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 51: Hoare triple {65269#true} ~skip~0 := 0; {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 52: Hoare triple {65269#true} assume !false; {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 53: Hoare triple {65269#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 54: Hoare triple {65269#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,342 INFO L273 TraceCheckUtils]: 55: Hoare triple {65269#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 56: Hoare triple {65269#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 57: Hoare triple {65269#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 58: Hoare triple {65269#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 59: Hoare triple {65269#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 60: Hoare triple {65269#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 61: Hoare triple {65269#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 62: Hoare triple {65269#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 63: Hoare triple {65269#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 64: Hoare triple {65269#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,343 INFO L273 TraceCheckUtils]: 65: Hoare triple {65269#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 66: Hoare triple {65269#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 67: Hoare triple {65269#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 68: Hoare triple {65269#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 69: Hoare triple {65269#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 70: Hoare triple {65269#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 71: Hoare triple {65269#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 72: Hoare triple {65269#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 73: Hoare triple {65269#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,344 INFO L273 TraceCheckUtils]: 74: Hoare triple {65269#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 75: Hoare triple {65269#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 76: Hoare triple {65269#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 77: Hoare triple {65269#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 78: Hoare triple {65269#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 79: Hoare triple {65269#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 80: Hoare triple {65269#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 81: Hoare triple {65269#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 82: Hoare triple {65269#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 83: Hoare triple {65269#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {65269#true} is VALID [2018-11-23 12:48:52,345 INFO L273 TraceCheckUtils]: 84: Hoare triple {65269#true} assume 8656 == #t~mem54;havoc #t~mem54; {65269#true} is VALID [2018-11-23 12:48:52,346 INFO L273 TraceCheckUtils]: 85: Hoare triple {65269#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {65269#true} is VALID [2018-11-23 12:48:52,346 INFO L273 TraceCheckUtils]: 86: Hoare triple {65269#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {65269#true} is VALID [2018-11-23 12:48:52,346 INFO L273 TraceCheckUtils]: 87: Hoare triple {65269#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {65269#true} is VALID [2018-11-23 12:48:52,347 INFO L273 TraceCheckUtils]: 88: Hoare triple {65269#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,348 INFO L273 TraceCheckUtils]: 89: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == ~tmp___10~0); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,348 INFO L273 TraceCheckUtils]: 90: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,351 INFO L273 TraceCheckUtils]: 91: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,351 INFO L273 TraceCheckUtils]: 92: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,351 INFO L273 TraceCheckUtils]: 93: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,352 INFO L273 TraceCheckUtils]: 94: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,352 INFO L273 TraceCheckUtils]: 95: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,352 INFO L273 TraceCheckUtils]: 96: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,352 INFO L273 TraceCheckUtils]: 97: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,353 INFO L273 TraceCheckUtils]: 98: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,353 INFO L273 TraceCheckUtils]: 99: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,353 INFO L273 TraceCheckUtils]: 100: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,354 INFO L273 TraceCheckUtils]: 101: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,354 INFO L273 TraceCheckUtils]: 102: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,354 INFO L273 TraceCheckUtils]: 103: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,355 INFO L273 TraceCheckUtils]: 104: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,355 INFO L273 TraceCheckUtils]: 105: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,355 INFO L273 TraceCheckUtils]: 106: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,355 INFO L273 TraceCheckUtils]: 107: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,356 INFO L273 TraceCheckUtils]: 108: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,356 INFO L273 TraceCheckUtils]: 109: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,357 INFO L273 TraceCheckUtils]: 110: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,357 INFO L273 TraceCheckUtils]: 111: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,358 INFO L273 TraceCheckUtils]: 112: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,358 INFO L273 TraceCheckUtils]: 113: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,359 INFO L273 TraceCheckUtils]: 114: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,359 INFO L273 TraceCheckUtils]: 115: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,360 INFO L273 TraceCheckUtils]: 116: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,360 INFO L273 TraceCheckUtils]: 117: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,360 INFO L273 TraceCheckUtils]: 118: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,361 INFO L273 TraceCheckUtils]: 119: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,361 INFO L273 TraceCheckUtils]: 120: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,362 INFO L273 TraceCheckUtils]: 121: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,362 INFO L273 TraceCheckUtils]: 122: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,363 INFO L273 TraceCheckUtils]: 123: Hoare triple {65271#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {65272#(= 8672 |ssl3_accept_#t~mem53|)} is VALID [2018-11-23 12:48:52,364 INFO L273 TraceCheckUtils]: 124: Hoare triple {65272#(= 8672 |ssl3_accept_#t~mem53|)} assume 8641 == #t~mem53;havoc #t~mem53; {65270#false} is VALID [2018-11-23 12:48:52,364 INFO L273 TraceCheckUtils]: 125: Hoare triple {65270#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {65270#false} is VALID [2018-11-23 12:48:52,364 INFO L273 TraceCheckUtils]: 126: Hoare triple {65270#false} assume 4 == ~blastFlag~0; {65270#false} is VALID [2018-11-23 12:48:52,364 INFO L273 TraceCheckUtils]: 127: Hoare triple {65270#false} assume !false; {65270#false} is VALID [2018-11-23 12:48:52,378 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 63 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:48:52,378 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:52,378 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:52,378 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 128 [2018-11-23 12:48:52,378 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:52,378 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:52,479 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:52,479 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:52,480 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:52,480 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:52,480 INFO L87 Difference]: Start difference. First operand 1115 states and 1689 transitions. Second operand 4 states. [2018-11-23 12:48:57,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:57,095 INFO L93 Difference]: Finished difference Result 2433 states and 3649 transitions. [2018-11-23 12:48:57,096 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:57,096 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 128 [2018-11-23 12:48:57,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:57,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:57,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 557 transitions. [2018-11-23 12:48:57,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:57,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 557 transitions. [2018-11-23 12:48:57,099 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 557 transitions. [2018-11-23 12:48:57,689 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 557 edges. 557 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:57,764 INFO L225 Difference]: With dead ends: 2433 [2018-11-23 12:48:57,765 INFO L226 Difference]: Without dead ends: 1343 [2018-11-23 12:48:57,766 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:57,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1343 states. [2018-11-23 12:48:58,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1343 to 1075. [2018-11-23 12:48:58,808 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:58,809 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1343 states. Second operand 1075 states. [2018-11-23 12:48:58,809 INFO L74 IsIncluded]: Start isIncluded. First operand 1343 states. Second operand 1075 states. [2018-11-23 12:48:58,809 INFO L87 Difference]: Start difference. First operand 1343 states. Second operand 1075 states. [2018-11-23 12:48:58,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:58,865 INFO L93 Difference]: Finished difference Result 1343 states and 1984 transitions. [2018-11-23 12:48:58,865 INFO L276 IsEmpty]: Start isEmpty. Operand 1343 states and 1984 transitions. [2018-11-23 12:48:58,866 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:58,866 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:58,866 INFO L74 IsIncluded]: Start isIncluded. First operand 1075 states. Second operand 1343 states. [2018-11-23 12:48:58,866 INFO L87 Difference]: Start difference. First operand 1075 states. Second operand 1343 states. [2018-11-23 12:48:58,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:58,923 INFO L93 Difference]: Finished difference Result 1343 states and 1984 transitions. [2018-11-23 12:48:58,923 INFO L276 IsEmpty]: Start isEmpty. Operand 1343 states and 1984 transitions. [2018-11-23 12:48:58,924 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:58,924 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:58,924 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:58,924 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:58,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1075 states. [2018-11-23 12:48:58,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1613 transitions. [2018-11-23 12:48:58,965 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1613 transitions. Word has length 128 [2018-11-23 12:48:58,965 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:58,965 INFO L480 AbstractCegarLoop]: Abstraction has 1075 states and 1613 transitions. [2018-11-23 12:48:58,965 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:58,965 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1613 transitions. [2018-11-23 12:48:58,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 12:48:58,966 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:58,966 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:58,966 INFO L423 AbstractCegarLoop]: === Iteration 43 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:58,967 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:58,967 INFO L82 PathProgramCache]: Analyzing trace with hash -401210212, now seen corresponding path program 1 times [2018-11-23 12:48:58,967 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:58,967 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:58,968 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:58,968 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:58,968 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:58,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:59,090 INFO L256 TraceCheckUtils]: 0: Hoare triple {71952#true} call ULTIMATE.init(); {71952#true} is VALID [2018-11-23 12:48:59,090 INFO L273 TraceCheckUtils]: 1: Hoare triple {71952#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,090 INFO L273 TraceCheckUtils]: 2: Hoare triple {71952#true} assume true; {71952#true} is VALID [2018-11-23 12:48:59,090 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {71952#true} {71952#true} #632#return; {71952#true} is VALID [2018-11-23 12:48:59,090 INFO L256 TraceCheckUtils]: 4: Hoare triple {71952#true} call #t~ret138 := main(); {71952#true} is VALID [2018-11-23 12:48:59,090 INFO L273 TraceCheckUtils]: 5: Hoare triple {71952#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L256 TraceCheckUtils]: 6: Hoare triple {71952#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 7: Hoare triple {71952#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 8: Hoare triple {71952#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 9: Hoare triple {71952#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 10: Hoare triple {71952#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 11: Hoare triple {71952#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 12: Hoare triple {71952#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {71952#true} is VALID [2018-11-23 12:48:59,091 INFO L273 TraceCheckUtils]: 13: Hoare triple {71952#true} assume !false; {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 14: Hoare triple {71952#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 15: Hoare triple {71952#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 16: Hoare triple {71952#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 17: Hoare triple {71952#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 18: Hoare triple {71952#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 19: Hoare triple {71952#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 20: Hoare triple {71952#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 21: Hoare triple {71952#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 22: Hoare triple {71952#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,092 INFO L273 TraceCheckUtils]: 23: Hoare triple {71952#true} assume 8464 == #t~mem32;havoc #t~mem32; {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 24: Hoare triple {71952#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 25: Hoare triple {71952#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 26: Hoare triple {71952#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 27: Hoare triple {71952#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 28: Hoare triple {71952#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 29: Hoare triple {71952#true} ~skip~0 := 0; {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 30: Hoare triple {71952#true} assume !false; {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 31: Hoare triple {71952#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 32: Hoare triple {71952#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,093 INFO L273 TraceCheckUtils]: 33: Hoare triple {71952#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 34: Hoare triple {71952#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 35: Hoare triple {71952#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 36: Hoare triple {71952#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 37: Hoare triple {71952#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 38: Hoare triple {71952#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 39: Hoare triple {71952#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 40: Hoare triple {71952#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 41: Hoare triple {71952#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,094 INFO L273 TraceCheckUtils]: 42: Hoare triple {71952#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 43: Hoare triple {71952#true} assume 8496 == #t~mem35;havoc #t~mem35; {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 44: Hoare triple {71952#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 45: Hoare triple {71952#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 46: Hoare triple {71952#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 47: Hoare triple {71952#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 48: Hoare triple {71952#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 49: Hoare triple {71952#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 50: Hoare triple {71952#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 51: Hoare triple {71952#true} ~skip~0 := 0; {71952#true} is VALID [2018-11-23 12:48:59,095 INFO L273 TraceCheckUtils]: 52: Hoare triple {71952#true} assume !false; {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 53: Hoare triple {71952#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 54: Hoare triple {71952#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 55: Hoare triple {71952#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 56: Hoare triple {71952#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 57: Hoare triple {71952#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 58: Hoare triple {71952#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 59: Hoare triple {71952#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 60: Hoare triple {71952#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,096 INFO L273 TraceCheckUtils]: 61: Hoare triple {71952#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 62: Hoare triple {71952#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 63: Hoare triple {71952#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 64: Hoare triple {71952#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 65: Hoare triple {71952#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 66: Hoare triple {71952#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 67: Hoare triple {71952#true} assume 8512 == #t~mem37;havoc #t~mem37; {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 68: Hoare triple {71952#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 69: Hoare triple {71952#true} assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 70: Hoare triple {71952#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 6; {71952#true} is VALID [2018-11-23 12:48:59,097 INFO L273 TraceCheckUtils]: 71: Hoare triple {71952#true} assume !(~ret~0 <= 0); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 72: Hoare triple {71952#true} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 73: Hoare triple {71952#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 74: Hoare triple {71952#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 75: Hoare triple {71952#true} ~skip~0 := 0; {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 76: Hoare triple {71952#true} assume !false; {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 77: Hoare triple {71952#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 78: Hoare triple {71952#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 79: Hoare triple {71952#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 80: Hoare triple {71952#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,098 INFO L273 TraceCheckUtils]: 81: Hoare triple {71952#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 82: Hoare triple {71952#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 83: Hoare triple {71952#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 84: Hoare triple {71952#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 85: Hoare triple {71952#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 86: Hoare triple {71952#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 87: Hoare triple {71952#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 88: Hoare triple {71952#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,099 INFO L273 TraceCheckUtils]: 89: Hoare triple {71952#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 90: Hoare triple {71952#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 91: Hoare triple {71952#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 92: Hoare triple {71952#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 93: Hoare triple {71952#true} assume 8528 == #t~mem39;havoc #t~mem39; {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 94: Hoare triple {71952#true} call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4);call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4);~l~0 := #t~mem78;havoc #t~mem77.base, #t~mem77.offset;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem78;call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 95: Hoare triple {71952#true} assume !(0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296);havoc #t~mem79;call #t~mem81.base, #t~mem81.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(0, #t~mem81.base, 871 + #t~mem81.offset, 4);havoc #t~mem81.base, #t~mem81.offset; {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 96: Hoare triple {71952#true} call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); {71952#true} is VALID [2018-11-23 12:48:59,100 INFO L273 TraceCheckUtils]: 97: Hoare triple {71952#true} assume 0 != #t~mem83;havoc #t~mem83;havoc #t~mem82.base, #t~mem82.offset; {71952#true} is VALID [2018-11-23 12:48:59,101 INFO L273 TraceCheckUtils]: 98: Hoare triple {71952#true} assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647;~ret~0 := #t~nondet92;havoc #t~nondet92; {71952#true} is VALID [2018-11-23 12:48:59,109 INFO L273 TraceCheckUtils]: 99: Hoare triple {71952#true} assume 6 == ~blastFlag~0;~blastFlag~0 := 7; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,110 INFO L273 TraceCheckUtils]: 100: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(~ret~0 <= 0); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,113 INFO L273 TraceCheckUtils]: 101: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} call write~int(8544, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,113 INFO L273 TraceCheckUtils]: 102: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,116 INFO L273 TraceCheckUtils]: 103: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,116 INFO L273 TraceCheckUtils]: 104: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} ~skip~0 := 0; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,119 INFO L273 TraceCheckUtils]: 105: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !false; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,119 INFO L273 TraceCheckUtils]: 106: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,122 INFO L273 TraceCheckUtils]: 107: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,122 INFO L273 TraceCheckUtils]: 108: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,122 INFO L273 TraceCheckUtils]: 109: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,123 INFO L273 TraceCheckUtils]: 110: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,123 INFO L273 TraceCheckUtils]: 111: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,123 INFO L273 TraceCheckUtils]: 112: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,123 INFO L273 TraceCheckUtils]: 113: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,124 INFO L273 TraceCheckUtils]: 114: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,124 INFO L273 TraceCheckUtils]: 115: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,124 INFO L273 TraceCheckUtils]: 116: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,125 INFO L273 TraceCheckUtils]: 117: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,125 INFO L273 TraceCheckUtils]: 118: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,125 INFO L273 TraceCheckUtils]: 119: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,125 INFO L273 TraceCheckUtils]: 120: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,126 INFO L273 TraceCheckUtils]: 121: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,126 INFO L273 TraceCheckUtils]: 122: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,127 INFO L273 TraceCheckUtils]: 123: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,127 INFO L273 TraceCheckUtils]: 124: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume 8544 == #t~mem41;havoc #t~mem41; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,128 INFO L273 TraceCheckUtils]: 125: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,128 INFO L273 TraceCheckUtils]: 126: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,129 INFO L273 TraceCheckUtils]: 127: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,129 INFO L273 TraceCheckUtils]: 128: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,130 INFO L273 TraceCheckUtils]: 129: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,130 INFO L273 TraceCheckUtils]: 130: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {71954#(<= ssl3_accept_~blastFlag~0 7)} is VALID [2018-11-23 12:48:59,131 INFO L273 TraceCheckUtils]: 131: Hoare triple {71954#(<= ssl3_accept_~blastFlag~0 7)} assume 8 == ~blastFlag~0; {71953#false} is VALID [2018-11-23 12:48:59,131 INFO L273 TraceCheckUtils]: 132: Hoare triple {71953#false} assume !false; {71953#false} is VALID [2018-11-23 12:48:59,139 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2018-11-23 12:48:59,139 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:59,139 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:59,139 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 133 [2018-11-23 12:48:59,140 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:59,140 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:59,227 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:59,227 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:59,228 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:59,228 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:59,228 INFO L87 Difference]: Start difference. First operand 1075 states and 1613 transitions. Second operand 3 states. [2018-11-23 12:49:00,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:00,791 INFO L93 Difference]: Finished difference Result 1341 states and 2010 transitions. [2018-11-23 12:49:00,791 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:49:00,791 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 133 [2018-11-23 12:49:00,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:00,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:49:00,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 403 transitions. [2018-11-23 12:49:00,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:49:00,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 403 transitions. [2018-11-23 12:49:00,795 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 403 transitions. [2018-11-23 12:49:01,210 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 403 edges. 403 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:01,287 INFO L225 Difference]: With dead ends: 1341 [2018-11-23 12:49:01,287 INFO L226 Difference]: Without dead ends: 1339 [2018-11-23 12:49:01,288 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:49:01,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1339 states. [2018-11-23 12:49:03,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1339 to 1337. [2018-11-23 12:49:03,153 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:03,153 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1339 states. Second operand 1337 states. [2018-11-23 12:49:03,153 INFO L74 IsIncluded]: Start isIncluded. First operand 1339 states. Second operand 1337 states. [2018-11-23 12:49:03,153 INFO L87 Difference]: Start difference. First operand 1339 states. Second operand 1337 states. [2018-11-23 12:49:03,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:03,214 INFO L93 Difference]: Finished difference Result 1339 states and 2008 transitions. [2018-11-23 12:49:03,214 INFO L276 IsEmpty]: Start isEmpty. Operand 1339 states and 2008 transitions. [2018-11-23 12:49:03,215 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:03,215 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:03,215 INFO L74 IsIncluded]: Start isIncluded. First operand 1337 states. Second operand 1339 states. [2018-11-23 12:49:03,215 INFO L87 Difference]: Start difference. First operand 1337 states. Second operand 1339 states. [2018-11-23 12:49:03,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:03,266 INFO L93 Difference]: Finished difference Result 1339 states and 2008 transitions. [2018-11-23 12:49:03,266 INFO L276 IsEmpty]: Start isEmpty. Operand 1339 states and 2008 transitions. [2018-11-23 12:49:03,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:03,267 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:03,267 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:03,267 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:03,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1337 states. [2018-11-23 12:49:03,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1337 states to 1337 states and 2007 transitions. [2018-11-23 12:49:03,325 INFO L78 Accepts]: Start accepts. Automaton has 1337 states and 2007 transitions. Word has length 133 [2018-11-23 12:49:03,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:03,325 INFO L480 AbstractCegarLoop]: Abstraction has 1337 states and 2007 transitions. [2018-11-23 12:49:03,325 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:49:03,326 INFO L276 IsEmpty]: Start isEmpty. Operand 1337 states and 2007 transitions. [2018-11-23 12:49:03,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 141 [2018-11-23 12:49:03,327 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:03,327 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:03,327 INFO L423 AbstractCegarLoop]: === Iteration 44 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:03,327 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:03,327 INFO L82 PathProgramCache]: Analyzing trace with hash 1393716788, now seen corresponding path program 1 times [2018-11-23 12:49:03,327 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:03,327 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:03,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:03,328 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:03,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:03,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:03,481 INFO L256 TraceCheckUtils]: 0: Hoare triple {77661#true} call ULTIMATE.init(); {77661#true} is VALID [2018-11-23 12:49:03,481 INFO L273 TraceCheckUtils]: 1: Hoare triple {77661#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L273 TraceCheckUtils]: 2: Hoare triple {77661#true} assume true; {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {77661#true} {77661#true} #632#return; {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L256 TraceCheckUtils]: 4: Hoare triple {77661#true} call #t~ret138 := main(); {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L273 TraceCheckUtils]: 5: Hoare triple {77661#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L256 TraceCheckUtils]: 6: Hoare triple {77661#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L273 TraceCheckUtils]: 7: Hoare triple {77661#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L273 TraceCheckUtils]: 8: Hoare triple {77661#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {77661#true} is VALID [2018-11-23 12:49:03,482 INFO L273 TraceCheckUtils]: 9: Hoare triple {77661#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 10: Hoare triple {77661#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 11: Hoare triple {77661#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 12: Hoare triple {77661#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 13: Hoare triple {77661#true} assume !false; {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 14: Hoare triple {77661#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 15: Hoare triple {77661#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 16: Hoare triple {77661#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 17: Hoare triple {77661#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 18: Hoare triple {77661#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,483 INFO L273 TraceCheckUtils]: 19: Hoare triple {77661#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 20: Hoare triple {77661#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 21: Hoare triple {77661#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 22: Hoare triple {77661#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 23: Hoare triple {77661#true} assume 8464 == #t~mem32;havoc #t~mem32; {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 24: Hoare triple {77661#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 25: Hoare triple {77661#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 26: Hoare triple {77661#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 27: Hoare triple {77661#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,484 INFO L273 TraceCheckUtils]: 28: Hoare triple {77661#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 29: Hoare triple {77661#true} ~skip~0 := 0; {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 30: Hoare triple {77661#true} assume !false; {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 31: Hoare triple {77661#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 32: Hoare triple {77661#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 33: Hoare triple {77661#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 34: Hoare triple {77661#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 35: Hoare triple {77661#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 36: Hoare triple {77661#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 37: Hoare triple {77661#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,485 INFO L273 TraceCheckUtils]: 38: Hoare triple {77661#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 39: Hoare triple {77661#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 40: Hoare triple {77661#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 41: Hoare triple {77661#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 42: Hoare triple {77661#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 43: Hoare triple {77661#true} assume 8496 == #t~mem35;havoc #t~mem35; {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 44: Hoare triple {77661#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 45: Hoare triple {77661#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 46: Hoare triple {77661#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 47: Hoare triple {77661#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,486 INFO L273 TraceCheckUtils]: 48: Hoare triple {77661#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 49: Hoare triple {77661#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 50: Hoare triple {77661#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 51: Hoare triple {77661#true} ~skip~0 := 0; {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 52: Hoare triple {77661#true} assume !false; {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 53: Hoare triple {77661#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 54: Hoare triple {77661#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 55: Hoare triple {77661#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 56: Hoare triple {77661#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,487 INFO L273 TraceCheckUtils]: 57: Hoare triple {77661#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 58: Hoare triple {77661#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 59: Hoare triple {77661#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 60: Hoare triple {77661#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 61: Hoare triple {77661#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 62: Hoare triple {77661#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 63: Hoare triple {77661#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 64: Hoare triple {77661#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 65: Hoare triple {77661#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 66: Hoare triple {77661#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,488 INFO L273 TraceCheckUtils]: 67: Hoare triple {77661#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 68: Hoare triple {77661#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 69: Hoare triple {77661#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 70: Hoare triple {77661#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 71: Hoare triple {77661#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 72: Hoare triple {77661#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 73: Hoare triple {77661#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 74: Hoare triple {77661#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 75: Hoare triple {77661#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 76: Hoare triple {77661#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,489 INFO L273 TraceCheckUtils]: 77: Hoare triple {77661#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 78: Hoare triple {77661#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 79: Hoare triple {77661#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 80: Hoare triple {77661#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 81: Hoare triple {77661#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 82: Hoare triple {77661#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 83: Hoare triple {77661#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 84: Hoare triple {77661#true} assume 8656 == #t~mem54;havoc #t~mem54; {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 85: Hoare triple {77661#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {77661#true} is VALID [2018-11-23 12:49:03,490 INFO L273 TraceCheckUtils]: 86: Hoare triple {77661#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {77661#true} is VALID [2018-11-23 12:49:03,491 INFO L273 TraceCheckUtils]: 87: Hoare triple {77661#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {77661#true} is VALID [2018-11-23 12:49:03,492 INFO L273 TraceCheckUtils]: 88: Hoare triple {77661#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,492 INFO L273 TraceCheckUtils]: 89: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == ~tmp___10~0); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,492 INFO L273 TraceCheckUtils]: 90: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,492 INFO L273 TraceCheckUtils]: 91: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,494 INFO L273 TraceCheckUtils]: 92: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} ~skip~0 := 0; {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,494 INFO L273 TraceCheckUtils]: 93: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !false; {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,496 INFO L273 TraceCheckUtils]: 94: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,496 INFO L273 TraceCheckUtils]: 95: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,496 INFO L273 TraceCheckUtils]: 96: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,497 INFO L273 TraceCheckUtils]: 97: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,497 INFO L273 TraceCheckUtils]: 98: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:03,497 INFO L273 TraceCheckUtils]: 99: Hoare triple {77663#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {77664#(= |ssl3_accept_#t~mem29| 8672)} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 100: Hoare triple {77664#(= |ssl3_accept_#t~mem29| 8672)} assume 8480 == #t~mem29;havoc #t~mem29; {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 101: Hoare triple {77662#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 102: Hoare triple {77662#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 103: Hoare triple {77662#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 104: Hoare triple {77662#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 105: Hoare triple {77662#false} ~skip~0 := 0; {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 106: Hoare triple {77662#false} assume !false; {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 107: Hoare triple {77662#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,498 INFO L273 TraceCheckUtils]: 108: Hoare triple {77662#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 109: Hoare triple {77662#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 110: Hoare triple {77662#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 111: Hoare triple {77662#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 112: Hoare triple {77662#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 113: Hoare triple {77662#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 114: Hoare triple {77662#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,499 INFO L273 TraceCheckUtils]: 115: Hoare triple {77662#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,500 INFO L273 TraceCheckUtils]: 116: Hoare triple {77662#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,500 INFO L273 TraceCheckUtils]: 117: Hoare triple {77662#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,500 INFO L273 TraceCheckUtils]: 118: Hoare triple {77662#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,500 INFO L273 TraceCheckUtils]: 119: Hoare triple {77662#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,501 INFO L273 TraceCheckUtils]: 120: Hoare triple {77662#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,501 INFO L273 TraceCheckUtils]: 121: Hoare triple {77662#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,501 INFO L273 TraceCheckUtils]: 122: Hoare triple {77662#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 123: Hoare triple {77662#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 124: Hoare triple {77662#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 125: Hoare triple {77662#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 126: Hoare triple {77662#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 127: Hoare triple {77662#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 128: Hoare triple {77662#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,502 INFO L273 TraceCheckUtils]: 129: Hoare triple {77662#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 130: Hoare triple {77662#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 131: Hoare triple {77662#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 132: Hoare triple {77662#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 133: Hoare triple {77662#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 134: Hoare triple {77662#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 135: Hoare triple {77662#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {77662#false} is VALID [2018-11-23 12:49:03,503 INFO L273 TraceCheckUtils]: 136: Hoare triple {77662#false} assume 8640 == #t~mem52;havoc #t~mem52; {77662#false} is VALID [2018-11-23 12:49:03,504 INFO L273 TraceCheckUtils]: 137: Hoare triple {77662#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {77662#false} is VALID [2018-11-23 12:49:03,504 INFO L273 TraceCheckUtils]: 138: Hoare triple {77662#false} assume 4 == ~blastFlag~0; {77662#false} is VALID [2018-11-23 12:49:03,504 INFO L273 TraceCheckUtils]: 139: Hoare triple {77662#false} assume !false; {77662#false} is VALID [2018-11-23 12:49:03,512 INFO L134 CoverageAnalysis]: Checked inductivity of 142 backedges. 103 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:03,513 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:03,513 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:03,513 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 140 [2018-11-23 12:49:03,513 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:03,513 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:03,625 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 114 edges. 114 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:03,625 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:03,625 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:03,625 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:03,626 INFO L87 Difference]: Start difference. First operand 1337 states and 2007 transitions. Second operand 4 states. [2018-11-23 12:49:11,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:11,281 INFO L93 Difference]: Finished difference Result 2984 states and 4448 transitions. [2018-11-23 12:49:11,281 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:49:11,281 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 140 [2018-11-23 12:49:11,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:11,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:11,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 556 transitions. [2018-11-23 12:49:11,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:11,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 556 transitions. [2018-11-23 12:49:11,285 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 556 transitions. [2018-11-23 12:49:11,935 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 556 edges. 556 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:12,046 INFO L225 Difference]: With dead ends: 2984 [2018-11-23 12:49:12,046 INFO L226 Difference]: Without dead ends: 1672 [2018-11-23 12:49:12,048 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:49:12,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1672 states. [2018-11-23 12:49:14,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1672 to 1337. [2018-11-23 12:49:14,192 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:14,192 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1672 states. Second operand 1337 states. [2018-11-23 12:49:14,192 INFO L74 IsIncluded]: Start isIncluded. First operand 1672 states. Second operand 1337 states. [2018-11-23 12:49:14,192 INFO L87 Difference]: Start difference. First operand 1672 states. Second operand 1337 states. [2018-11-23 12:49:14,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:14,295 INFO L93 Difference]: Finished difference Result 1672 states and 2464 transitions. [2018-11-23 12:49:14,295 INFO L276 IsEmpty]: Start isEmpty. Operand 1672 states and 2464 transitions. [2018-11-23 12:49:14,296 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:14,296 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:14,296 INFO L74 IsIncluded]: Start isIncluded. First operand 1337 states. Second operand 1672 states. [2018-11-23 12:49:14,296 INFO L87 Difference]: Start difference. First operand 1337 states. Second operand 1672 states. [2018-11-23 12:49:14,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:14,378 INFO L93 Difference]: Finished difference Result 1672 states and 2464 transitions. [2018-11-23 12:49:14,378 INFO L276 IsEmpty]: Start isEmpty. Operand 1672 states and 2464 transitions. [2018-11-23 12:49:14,379 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:14,379 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:14,380 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:14,380 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:14,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1337 states. [2018-11-23 12:49:14,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1337 states to 1337 states and 2002 transitions. [2018-11-23 12:49:14,438 INFO L78 Accepts]: Start accepts. Automaton has 1337 states and 2002 transitions. Word has length 140 [2018-11-23 12:49:14,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:14,438 INFO L480 AbstractCegarLoop]: Abstraction has 1337 states and 2002 transitions. [2018-11-23 12:49:14,438 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:49:14,438 INFO L276 IsEmpty]: Start isEmpty. Operand 1337 states and 2002 transitions. [2018-11-23 12:49:14,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2018-11-23 12:49:14,439 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:14,440 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:14,440 INFO L423 AbstractCegarLoop]: === Iteration 45 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:14,440 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:14,440 INFO L82 PathProgramCache]: Analyzing trace with hash 547229759, now seen corresponding path program 1 times [2018-11-23 12:49:14,440 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:14,440 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:14,441 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:14,441 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:14,441 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:14,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:14,617 INFO L256 TraceCheckUtils]: 0: Hoare triple {85931#true} call ULTIMATE.init(); {85931#true} is VALID [2018-11-23 12:49:14,617 INFO L273 TraceCheckUtils]: 1: Hoare triple {85931#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,617 INFO L273 TraceCheckUtils]: 2: Hoare triple {85931#true} assume true; {85931#true} is VALID [2018-11-23 12:49:14,618 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {85931#true} {85931#true} #632#return; {85931#true} is VALID [2018-11-23 12:49:14,618 INFO L256 TraceCheckUtils]: 4: Hoare triple {85931#true} call #t~ret138 := main(); {85931#true} is VALID [2018-11-23 12:49:14,618 INFO L273 TraceCheckUtils]: 5: Hoare triple {85931#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,618 INFO L256 TraceCheckUtils]: 6: Hoare triple {85931#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {85931#true} is VALID [2018-11-23 12:49:14,618 INFO L273 TraceCheckUtils]: 7: Hoare triple {85931#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,618 INFO L273 TraceCheckUtils]: 8: Hoare triple {85931#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 9: Hoare triple {85931#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 10: Hoare triple {85931#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 11: Hoare triple {85931#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 12: Hoare triple {85931#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 13: Hoare triple {85931#true} assume !false; {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 14: Hoare triple {85931#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 15: Hoare triple {85931#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 16: Hoare triple {85931#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,619 INFO L273 TraceCheckUtils]: 17: Hoare triple {85931#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 18: Hoare triple {85931#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 19: Hoare triple {85931#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 20: Hoare triple {85931#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 21: Hoare triple {85931#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 22: Hoare triple {85931#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 23: Hoare triple {85931#true} assume 8464 == #t~mem32;havoc #t~mem32; {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 24: Hoare triple {85931#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 25: Hoare triple {85931#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 26: Hoare triple {85931#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,620 INFO L273 TraceCheckUtils]: 27: Hoare triple {85931#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 28: Hoare triple {85931#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 29: Hoare triple {85931#true} ~skip~0 := 0; {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 30: Hoare triple {85931#true} assume !false; {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 31: Hoare triple {85931#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 32: Hoare triple {85931#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 33: Hoare triple {85931#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 34: Hoare triple {85931#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 35: Hoare triple {85931#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,621 INFO L273 TraceCheckUtils]: 36: Hoare triple {85931#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 37: Hoare triple {85931#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 38: Hoare triple {85931#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 39: Hoare triple {85931#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 40: Hoare triple {85931#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 41: Hoare triple {85931#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 42: Hoare triple {85931#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,622 INFO L273 TraceCheckUtils]: 43: Hoare triple {85931#true} assume 8496 == #t~mem35;havoc #t~mem35; {85931#true} is VALID [2018-11-23 12:49:14,623 INFO L273 TraceCheckUtils]: 44: Hoare triple {85931#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {85931#true} is VALID [2018-11-23 12:49:14,623 INFO L273 TraceCheckUtils]: 45: Hoare triple {85931#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {85931#true} is VALID [2018-11-23 12:49:14,623 INFO L273 TraceCheckUtils]: 46: Hoare triple {85931#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,623 INFO L273 TraceCheckUtils]: 47: Hoare triple {85931#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,623 INFO L273 TraceCheckUtils]: 48: Hoare triple {85931#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,623 INFO L273 TraceCheckUtils]: 49: Hoare triple {85931#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,624 INFO L273 TraceCheckUtils]: 50: Hoare triple {85931#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {85931#true} is VALID [2018-11-23 12:49:14,624 INFO L273 TraceCheckUtils]: 51: Hoare triple {85931#true} ~skip~0 := 0; {85931#true} is VALID [2018-11-23 12:49:14,624 INFO L273 TraceCheckUtils]: 52: Hoare triple {85931#true} assume !false; {85931#true} is VALID [2018-11-23 12:49:14,624 INFO L273 TraceCheckUtils]: 53: Hoare triple {85931#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,624 INFO L273 TraceCheckUtils]: 54: Hoare triple {85931#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,624 INFO L273 TraceCheckUtils]: 55: Hoare triple {85931#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,625 INFO L273 TraceCheckUtils]: 56: Hoare triple {85931#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,625 INFO L273 TraceCheckUtils]: 57: Hoare triple {85931#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,625 INFO L273 TraceCheckUtils]: 58: Hoare triple {85931#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,625 INFO L273 TraceCheckUtils]: 59: Hoare triple {85931#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,625 INFO L273 TraceCheckUtils]: 60: Hoare triple {85931#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,625 INFO L273 TraceCheckUtils]: 61: Hoare triple {85931#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,626 INFO L273 TraceCheckUtils]: 62: Hoare triple {85931#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,626 INFO L273 TraceCheckUtils]: 63: Hoare triple {85931#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,626 INFO L273 TraceCheckUtils]: 64: Hoare triple {85931#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,626 INFO L273 TraceCheckUtils]: 65: Hoare triple {85931#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,626 INFO L273 TraceCheckUtils]: 66: Hoare triple {85931#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,626 INFO L273 TraceCheckUtils]: 67: Hoare triple {85931#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 68: Hoare triple {85931#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 69: Hoare triple {85931#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 70: Hoare triple {85931#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 71: Hoare triple {85931#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 72: Hoare triple {85931#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 73: Hoare triple {85931#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,627 INFO L273 TraceCheckUtils]: 74: Hoare triple {85931#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,628 INFO L273 TraceCheckUtils]: 75: Hoare triple {85931#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,628 INFO L273 TraceCheckUtils]: 76: Hoare triple {85931#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,628 INFO L273 TraceCheckUtils]: 77: Hoare triple {85931#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,628 INFO L273 TraceCheckUtils]: 78: Hoare triple {85931#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,628 INFO L273 TraceCheckUtils]: 79: Hoare triple {85931#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,628 INFO L273 TraceCheckUtils]: 80: Hoare triple {85931#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,629 INFO L273 TraceCheckUtils]: 81: Hoare triple {85931#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,629 INFO L273 TraceCheckUtils]: 82: Hoare triple {85931#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,629 INFO L273 TraceCheckUtils]: 83: Hoare triple {85931#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {85931#true} is VALID [2018-11-23 12:49:14,629 INFO L273 TraceCheckUtils]: 84: Hoare triple {85931#true} assume 8656 == #t~mem54;havoc #t~mem54; {85931#true} is VALID [2018-11-23 12:49:14,629 INFO L273 TraceCheckUtils]: 85: Hoare triple {85931#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {85931#true} is VALID [2018-11-23 12:49:14,629 INFO L273 TraceCheckUtils]: 86: Hoare triple {85931#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {85931#true} is VALID [2018-11-23 12:49:14,630 INFO L273 TraceCheckUtils]: 87: Hoare triple {85931#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {85931#true} is VALID [2018-11-23 12:49:14,645 INFO L273 TraceCheckUtils]: 88: Hoare triple {85931#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,653 INFO L273 TraceCheckUtils]: 89: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == ~tmp___10~0); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,667 INFO L273 TraceCheckUtils]: 90: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,675 INFO L273 TraceCheckUtils]: 91: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,690 INFO L273 TraceCheckUtils]: 92: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} ~skip~0 := 0; {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,698 INFO L273 TraceCheckUtils]: 93: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !false; {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,713 INFO L273 TraceCheckUtils]: 94: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,714 INFO L273 TraceCheckUtils]: 95: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,715 INFO L273 TraceCheckUtils]: 96: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,720 INFO L273 TraceCheckUtils]: 97: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,720 INFO L273 TraceCheckUtils]: 98: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,722 INFO L273 TraceCheckUtils]: 99: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:14,722 INFO L273 TraceCheckUtils]: 100: Hoare triple {85933#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {85934#(= |ssl3_accept_#t~mem30| 8672)} is VALID [2018-11-23 12:49:14,722 INFO L273 TraceCheckUtils]: 101: Hoare triple {85934#(= |ssl3_accept_#t~mem30| 8672)} assume 8481 == #t~mem30;havoc #t~mem30; {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 102: Hoare triple {85932#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 103: Hoare triple {85932#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 104: Hoare triple {85932#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 105: Hoare triple {85932#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 106: Hoare triple {85932#false} ~skip~0 := 0; {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 107: Hoare triple {85932#false} assume !false; {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 108: Hoare triple {85932#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 109: Hoare triple {85932#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,723 INFO L273 TraceCheckUtils]: 110: Hoare triple {85932#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 111: Hoare triple {85932#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 112: Hoare triple {85932#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 113: Hoare triple {85932#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 114: Hoare triple {85932#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 115: Hoare triple {85932#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 116: Hoare triple {85932#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 117: Hoare triple {85932#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 118: Hoare triple {85932#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 119: Hoare triple {85932#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,724 INFO L273 TraceCheckUtils]: 120: Hoare triple {85932#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 121: Hoare triple {85932#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 122: Hoare triple {85932#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 123: Hoare triple {85932#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 124: Hoare triple {85932#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 125: Hoare triple {85932#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 126: Hoare triple {85932#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 127: Hoare triple {85932#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 128: Hoare triple {85932#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 129: Hoare triple {85932#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,725 INFO L273 TraceCheckUtils]: 130: Hoare triple {85932#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 131: Hoare triple {85932#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 132: Hoare triple {85932#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 133: Hoare triple {85932#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 134: Hoare triple {85932#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 135: Hoare triple {85932#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 136: Hoare triple {85932#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 137: Hoare triple {85932#false} assume 8640 == #t~mem52;havoc #t~mem52; {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 138: Hoare triple {85932#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {85932#false} is VALID [2018-11-23 12:49:14,726 INFO L273 TraceCheckUtils]: 139: Hoare triple {85932#false} assume 4 == ~blastFlag~0; {85932#false} is VALID [2018-11-23 12:49:14,727 INFO L273 TraceCheckUtils]: 140: Hoare triple {85932#false} assume !false; {85932#false} is VALID [2018-11-23 12:49:14,735 INFO L134 CoverageAnalysis]: Checked inductivity of 146 backedges. 107 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:14,735 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:14,736 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:14,736 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 141 [2018-11-23 12:49:14,736 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:14,736 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:14,846 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 115 edges. 115 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:14,846 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:14,847 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:14,847 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:14,847 INFO L87 Difference]: Start difference. First operand 1337 states and 2002 transitions. Second operand 4 states. [2018-11-23 12:49:23,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:23,083 INFO L93 Difference]: Finished difference Result 2974 states and 4428 transitions. [2018-11-23 12:49:23,083 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:49:23,083 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 141 [2018-11-23 12:49:23,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:23,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:23,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 553 transitions. [2018-11-23 12:49:23,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:23,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 553 transitions. [2018-11-23 12:49:23,087 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 553 transitions. [2018-11-23 12:49:23,707 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 553 edges. 553 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:23,819 INFO L225 Difference]: With dead ends: 2974 [2018-11-23 12:49:23,819 INFO L226 Difference]: Without dead ends: 1662 [2018-11-23 12:49:23,820 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:49:23,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1662 states. [2018-11-23 12:49:29,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1662 to 1337. [2018-11-23 12:49:29,680 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:29,680 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1662 states. Second operand 1337 states. [2018-11-23 12:49:29,680 INFO L74 IsIncluded]: Start isIncluded. First operand 1662 states. Second operand 1337 states. [2018-11-23 12:49:29,680 INFO L87 Difference]: Start difference. First operand 1662 states. Second operand 1337 states. [2018-11-23 12:49:29,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:29,780 INFO L93 Difference]: Finished difference Result 1662 states and 2449 transitions. [2018-11-23 12:49:29,780 INFO L276 IsEmpty]: Start isEmpty. Operand 1662 states and 2449 transitions. [2018-11-23 12:49:29,782 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:29,782 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:29,782 INFO L74 IsIncluded]: Start isIncluded. First operand 1337 states. Second operand 1662 states. [2018-11-23 12:49:29,782 INFO L87 Difference]: Start difference. First operand 1337 states. Second operand 1662 states. [2018-11-23 12:49:29,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:29,880 INFO L93 Difference]: Finished difference Result 1662 states and 2449 transitions. [2018-11-23 12:49:29,880 INFO L276 IsEmpty]: Start isEmpty. Operand 1662 states and 2449 transitions. [2018-11-23 12:49:29,881 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:29,881 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:29,881 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:29,881 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:29,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1337 states. [2018-11-23 12:49:29,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1337 states to 1337 states and 1997 transitions. [2018-11-23 12:49:29,946 INFO L78 Accepts]: Start accepts. Automaton has 1337 states and 1997 transitions. Word has length 141 [2018-11-23 12:49:29,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:29,946 INFO L480 AbstractCegarLoop]: Abstraction has 1337 states and 1997 transitions. [2018-11-23 12:49:29,946 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:49:29,947 INFO L276 IsEmpty]: Start isEmpty. Operand 1337 states and 1997 transitions. [2018-11-23 12:49:29,947 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 142 [2018-11-23 12:49:29,948 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:29,948 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:29,948 INFO L423 AbstractCegarLoop]: === Iteration 46 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:29,948 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:29,948 INFO L82 PathProgramCache]: Analyzing trace with hash -1110798656, now seen corresponding path program 1 times [2018-11-23 12:49:29,948 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:29,948 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:29,949 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:29,949 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:29,949 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:29,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:30,145 INFO L256 TraceCheckUtils]: 0: Hoare triple {94166#true} call ULTIMATE.init(); {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L273 TraceCheckUtils]: 1: Hoare triple {94166#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L273 TraceCheckUtils]: 2: Hoare triple {94166#true} assume true; {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {94166#true} {94166#true} #632#return; {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L256 TraceCheckUtils]: 4: Hoare triple {94166#true} call #t~ret138 := main(); {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L273 TraceCheckUtils]: 5: Hoare triple {94166#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L256 TraceCheckUtils]: 6: Hoare triple {94166#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {94166#true} is VALID [2018-11-23 12:49:30,146 INFO L273 TraceCheckUtils]: 7: Hoare triple {94166#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 8: Hoare triple {94166#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 9: Hoare triple {94166#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 10: Hoare triple {94166#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 11: Hoare triple {94166#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 12: Hoare triple {94166#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 13: Hoare triple {94166#true} assume !false; {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 14: Hoare triple {94166#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 15: Hoare triple {94166#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,147 INFO L273 TraceCheckUtils]: 16: Hoare triple {94166#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 17: Hoare triple {94166#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 18: Hoare triple {94166#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 19: Hoare triple {94166#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 20: Hoare triple {94166#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 21: Hoare triple {94166#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 22: Hoare triple {94166#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 23: Hoare triple {94166#true} assume 8464 == #t~mem32;havoc #t~mem32; {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 24: Hoare triple {94166#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 25: Hoare triple {94166#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {94166#true} is VALID [2018-11-23 12:49:30,148 INFO L273 TraceCheckUtils]: 26: Hoare triple {94166#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 27: Hoare triple {94166#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 28: Hoare triple {94166#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 29: Hoare triple {94166#true} ~skip~0 := 0; {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 30: Hoare triple {94166#true} assume !false; {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 31: Hoare triple {94166#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 32: Hoare triple {94166#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 33: Hoare triple {94166#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 34: Hoare triple {94166#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,149 INFO L273 TraceCheckUtils]: 35: Hoare triple {94166#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 36: Hoare triple {94166#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 37: Hoare triple {94166#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 38: Hoare triple {94166#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 39: Hoare triple {94166#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 40: Hoare triple {94166#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 41: Hoare triple {94166#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 42: Hoare triple {94166#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 43: Hoare triple {94166#true} assume 8496 == #t~mem35;havoc #t~mem35; {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 44: Hoare triple {94166#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {94166#true} is VALID [2018-11-23 12:49:30,150 INFO L273 TraceCheckUtils]: 45: Hoare triple {94166#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 46: Hoare triple {94166#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 47: Hoare triple {94166#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 48: Hoare triple {94166#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 49: Hoare triple {94166#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 50: Hoare triple {94166#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 51: Hoare triple {94166#true} ~skip~0 := 0; {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 52: Hoare triple {94166#true} assume !false; {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 53: Hoare triple {94166#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 54: Hoare triple {94166#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,151 INFO L273 TraceCheckUtils]: 55: Hoare triple {94166#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 56: Hoare triple {94166#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 57: Hoare triple {94166#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 58: Hoare triple {94166#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 59: Hoare triple {94166#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 60: Hoare triple {94166#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 61: Hoare triple {94166#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 62: Hoare triple {94166#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 63: Hoare triple {94166#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 64: Hoare triple {94166#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,152 INFO L273 TraceCheckUtils]: 65: Hoare triple {94166#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 66: Hoare triple {94166#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 67: Hoare triple {94166#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 68: Hoare triple {94166#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 69: Hoare triple {94166#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 70: Hoare triple {94166#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 71: Hoare triple {94166#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,153 INFO L273 TraceCheckUtils]: 72: Hoare triple {94166#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 73: Hoare triple {94166#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 74: Hoare triple {94166#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 75: Hoare triple {94166#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 76: Hoare triple {94166#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 77: Hoare triple {94166#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 78: Hoare triple {94166#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,154 INFO L273 TraceCheckUtils]: 79: Hoare triple {94166#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 80: Hoare triple {94166#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 81: Hoare triple {94166#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 82: Hoare triple {94166#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 83: Hoare triple {94166#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 84: Hoare triple {94166#true} assume 8656 == #t~mem54;havoc #t~mem54; {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 85: Hoare triple {94166#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {94166#true} is VALID [2018-11-23 12:49:30,155 INFO L273 TraceCheckUtils]: 86: Hoare triple {94166#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {94166#true} is VALID [2018-11-23 12:49:30,156 INFO L273 TraceCheckUtils]: 87: Hoare triple {94166#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {94166#true} is VALID [2018-11-23 12:49:30,157 INFO L273 TraceCheckUtils]: 88: Hoare triple {94166#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,157 INFO L273 TraceCheckUtils]: 89: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == ~tmp___10~0); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,158 INFO L273 TraceCheckUtils]: 90: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,159 INFO L273 TraceCheckUtils]: 91: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,159 INFO L273 TraceCheckUtils]: 92: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} ~skip~0 := 0; {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,161 INFO L273 TraceCheckUtils]: 93: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !false; {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,161 INFO L273 TraceCheckUtils]: 94: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,164 INFO L273 TraceCheckUtils]: 95: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,164 INFO L273 TraceCheckUtils]: 96: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,166 INFO L273 TraceCheckUtils]: 97: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,166 INFO L273 TraceCheckUtils]: 98: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,166 INFO L273 TraceCheckUtils]: 99: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,167 INFO L273 TraceCheckUtils]: 100: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:30,168 INFO L273 TraceCheckUtils]: 101: Hoare triple {94168#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {94169#(= |ssl3_accept_#t~mem31| 8672)} is VALID [2018-11-23 12:49:30,168 INFO L273 TraceCheckUtils]: 102: Hoare triple {94169#(= |ssl3_accept_#t~mem31| 8672)} assume 8482 == #t~mem31;havoc #t~mem31; {94167#false} is VALID [2018-11-23 12:49:30,168 INFO L273 TraceCheckUtils]: 103: Hoare triple {94167#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,168 INFO L273 TraceCheckUtils]: 104: Hoare triple {94167#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,168 INFO L273 TraceCheckUtils]: 105: Hoare triple {94167#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {94167#false} is VALID [2018-11-23 12:49:30,168 INFO L273 TraceCheckUtils]: 106: Hoare triple {94167#false} ~skip~0 := 0; {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 107: Hoare triple {94167#false} assume !false; {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 108: Hoare triple {94167#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 109: Hoare triple {94167#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 110: Hoare triple {94167#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 111: Hoare triple {94167#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 112: Hoare triple {94167#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 113: Hoare triple {94167#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,169 INFO L273 TraceCheckUtils]: 114: Hoare triple {94167#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,170 INFO L273 TraceCheckUtils]: 115: Hoare triple {94167#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,170 INFO L273 TraceCheckUtils]: 116: Hoare triple {94167#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,170 INFO L273 TraceCheckUtils]: 117: Hoare triple {94167#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,170 INFO L273 TraceCheckUtils]: 118: Hoare triple {94167#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,170 INFO L273 TraceCheckUtils]: 119: Hoare triple {94167#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,170 INFO L273 TraceCheckUtils]: 120: Hoare triple {94167#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,171 INFO L273 TraceCheckUtils]: 121: Hoare triple {94167#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,171 INFO L273 TraceCheckUtils]: 122: Hoare triple {94167#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,171 INFO L273 TraceCheckUtils]: 123: Hoare triple {94167#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,171 INFO L273 TraceCheckUtils]: 124: Hoare triple {94167#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,171 INFO L273 TraceCheckUtils]: 125: Hoare triple {94167#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,171 INFO L273 TraceCheckUtils]: 126: Hoare triple {94167#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 127: Hoare triple {94167#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 128: Hoare triple {94167#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 129: Hoare triple {94167#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 130: Hoare triple {94167#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 131: Hoare triple {94167#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 132: Hoare triple {94167#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 133: Hoare triple {94167#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,172 INFO L273 TraceCheckUtils]: 134: Hoare triple {94167#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,173 INFO L273 TraceCheckUtils]: 135: Hoare triple {94167#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,173 INFO L273 TraceCheckUtils]: 136: Hoare triple {94167#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {94167#false} is VALID [2018-11-23 12:49:30,173 INFO L273 TraceCheckUtils]: 137: Hoare triple {94167#false} assume 8640 == #t~mem52;havoc #t~mem52; {94167#false} is VALID [2018-11-23 12:49:30,173 INFO L273 TraceCheckUtils]: 138: Hoare triple {94167#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {94167#false} is VALID [2018-11-23 12:49:30,173 INFO L273 TraceCheckUtils]: 139: Hoare triple {94167#false} assume 4 == ~blastFlag~0; {94167#false} is VALID [2018-11-23 12:49:30,173 INFO L273 TraceCheckUtils]: 140: Hoare triple {94167#false} assume !false; {94167#false} is VALID [2018-11-23 12:49:30,182 INFO L134 CoverageAnalysis]: Checked inductivity of 150 backedges. 111 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:30,182 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:30,182 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:30,183 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 141 [2018-11-23 12:49:30,183 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:30,183 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:30,388 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 115 edges. 115 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:30,388 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:30,388 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:30,388 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:30,389 INFO L87 Difference]: Start difference. First operand 1337 states and 1997 transitions. Second operand 4 states. [2018-11-23 12:49:36,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:36,165 INFO L93 Difference]: Finished difference Result 2969 states and 4413 transitions. [2018-11-23 12:49:36,165 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:49:36,166 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 141 [2018-11-23 12:49:36,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:36,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:36,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 551 transitions. [2018-11-23 12:49:36,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:36,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 551 transitions. [2018-11-23 12:49:36,170 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 551 transitions. [2018-11-23 12:49:36,745 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 551 edges. 551 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:36,873 INFO L225 Difference]: With dead ends: 2969 [2018-11-23 12:49:36,873 INFO L226 Difference]: Without dead ends: 1657 [2018-11-23 12:49:36,875 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:49:36,876 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states. [2018-11-23 12:49:41,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1657 to 1337. [2018-11-23 12:49:41,293 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:41,293 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1657 states. Second operand 1337 states. [2018-11-23 12:49:41,293 INFO L74 IsIncluded]: Start isIncluded. First operand 1657 states. Second operand 1337 states. [2018-11-23 12:49:41,293 INFO L87 Difference]: Start difference. First operand 1657 states. Second operand 1337 states. [2018-11-23 12:49:41,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:41,392 INFO L93 Difference]: Finished difference Result 1657 states and 2439 transitions. [2018-11-23 12:49:41,392 INFO L276 IsEmpty]: Start isEmpty. Operand 1657 states and 2439 transitions. [2018-11-23 12:49:41,394 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:41,394 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:41,394 INFO L74 IsIncluded]: Start isIncluded. First operand 1337 states. Second operand 1657 states. [2018-11-23 12:49:41,394 INFO L87 Difference]: Start difference. First operand 1337 states. Second operand 1657 states. [2018-11-23 12:49:41,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:41,489 INFO L93 Difference]: Finished difference Result 1657 states and 2439 transitions. [2018-11-23 12:49:41,489 INFO L276 IsEmpty]: Start isEmpty. Operand 1657 states and 2439 transitions. [2018-11-23 12:49:41,491 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:41,491 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:41,491 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:41,491 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:41,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1337 states. [2018-11-23 12:49:41,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1337 states to 1337 states and 1992 transitions. [2018-11-23 12:49:41,553 INFO L78 Accepts]: Start accepts. Automaton has 1337 states and 1992 transitions. Word has length 141 [2018-11-23 12:49:41,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:41,553 INFO L480 AbstractCegarLoop]: Abstraction has 1337 states and 1992 transitions. [2018-11-23 12:49:41,553 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:49:41,553 INFO L276 IsEmpty]: Start isEmpty. Operand 1337 states and 1992 transitions. [2018-11-23 12:49:41,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2018-11-23 12:49:41,554 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:41,554 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:41,554 INFO L423 AbstractCegarLoop]: === Iteration 47 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:41,554 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:41,554 INFO L82 PathProgramCache]: Analyzing trace with hash 1131603569, now seen corresponding path program 1 times [2018-11-23 12:49:41,554 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:41,555 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:41,555 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:41,555 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:41,556 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:41,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:41,819 INFO L256 TraceCheckUtils]: 0: Hoare triple {102381#true} call ULTIMATE.init(); {102381#true} is VALID [2018-11-23 12:49:41,820 INFO L273 TraceCheckUtils]: 1: Hoare triple {102381#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,820 INFO L273 TraceCheckUtils]: 2: Hoare triple {102381#true} assume true; {102381#true} is VALID [2018-11-23 12:49:41,820 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {102381#true} {102381#true} #632#return; {102381#true} is VALID [2018-11-23 12:49:41,820 INFO L256 TraceCheckUtils]: 4: Hoare triple {102381#true} call #t~ret138 := main(); {102381#true} is VALID [2018-11-23 12:49:41,821 INFO L273 TraceCheckUtils]: 5: Hoare triple {102381#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,821 INFO L256 TraceCheckUtils]: 6: Hoare triple {102381#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {102381#true} is VALID [2018-11-23 12:49:41,821 INFO L273 TraceCheckUtils]: 7: Hoare triple {102381#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,821 INFO L273 TraceCheckUtils]: 8: Hoare triple {102381#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 9: Hoare triple {102381#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 10: Hoare triple {102381#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 11: Hoare triple {102381#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 12: Hoare triple {102381#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 13: Hoare triple {102381#true} assume !false; {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 14: Hoare triple {102381#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 15: Hoare triple {102381#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,822 INFO L273 TraceCheckUtils]: 16: Hoare triple {102381#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 17: Hoare triple {102381#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 18: Hoare triple {102381#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 19: Hoare triple {102381#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 20: Hoare triple {102381#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 21: Hoare triple {102381#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 22: Hoare triple {102381#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 23: Hoare triple {102381#true} assume 8464 == #t~mem32;havoc #t~mem32; {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 24: Hoare triple {102381#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 25: Hoare triple {102381#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {102381#true} is VALID [2018-11-23 12:49:41,823 INFO L273 TraceCheckUtils]: 26: Hoare triple {102381#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 27: Hoare triple {102381#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 28: Hoare triple {102381#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 29: Hoare triple {102381#true} ~skip~0 := 0; {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 30: Hoare triple {102381#true} assume !false; {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 31: Hoare triple {102381#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 32: Hoare triple {102381#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 33: Hoare triple {102381#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 34: Hoare triple {102381#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,824 INFO L273 TraceCheckUtils]: 35: Hoare triple {102381#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 36: Hoare triple {102381#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 37: Hoare triple {102381#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 38: Hoare triple {102381#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 39: Hoare triple {102381#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 40: Hoare triple {102381#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 41: Hoare triple {102381#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 42: Hoare triple {102381#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 43: Hoare triple {102381#true} assume 8496 == #t~mem35;havoc #t~mem35; {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 44: Hoare triple {102381#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {102381#true} is VALID [2018-11-23 12:49:41,825 INFO L273 TraceCheckUtils]: 45: Hoare triple {102381#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 46: Hoare triple {102381#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 47: Hoare triple {102381#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 48: Hoare triple {102381#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 49: Hoare triple {102381#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 50: Hoare triple {102381#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 51: Hoare triple {102381#true} ~skip~0 := 0; {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 52: Hoare triple {102381#true} assume !false; {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 53: Hoare triple {102381#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 54: Hoare triple {102381#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,826 INFO L273 TraceCheckUtils]: 55: Hoare triple {102381#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 56: Hoare triple {102381#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 57: Hoare triple {102381#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 58: Hoare triple {102381#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 59: Hoare triple {102381#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 60: Hoare triple {102381#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 61: Hoare triple {102381#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 62: Hoare triple {102381#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 63: Hoare triple {102381#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,827 INFO L273 TraceCheckUtils]: 64: Hoare triple {102381#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 65: Hoare triple {102381#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 66: Hoare triple {102381#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 67: Hoare triple {102381#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 68: Hoare triple {102381#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 69: Hoare triple {102381#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 70: Hoare triple {102381#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 71: Hoare triple {102381#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 72: Hoare triple {102381#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 73: Hoare triple {102381#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,828 INFO L273 TraceCheckUtils]: 74: Hoare triple {102381#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 75: Hoare triple {102381#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 76: Hoare triple {102381#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 77: Hoare triple {102381#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 78: Hoare triple {102381#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 79: Hoare triple {102381#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 80: Hoare triple {102381#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 81: Hoare triple {102381#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 82: Hoare triple {102381#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 83: Hoare triple {102381#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {102381#true} is VALID [2018-11-23 12:49:41,829 INFO L273 TraceCheckUtils]: 84: Hoare triple {102381#true} assume 8656 == #t~mem54;havoc #t~mem54; {102381#true} is VALID [2018-11-23 12:49:41,830 INFO L273 TraceCheckUtils]: 85: Hoare triple {102381#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {102381#true} is VALID [2018-11-23 12:49:41,830 INFO L273 TraceCheckUtils]: 86: Hoare triple {102381#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {102381#true} is VALID [2018-11-23 12:49:41,830 INFO L273 TraceCheckUtils]: 87: Hoare triple {102381#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {102381#true} is VALID [2018-11-23 12:49:41,831 INFO L273 TraceCheckUtils]: 88: Hoare triple {102381#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,831 INFO L273 TraceCheckUtils]: 89: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == ~tmp___10~0); {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,833 INFO L273 TraceCheckUtils]: 90: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,833 INFO L273 TraceCheckUtils]: 91: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,835 INFO L273 TraceCheckUtils]: 92: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} ~skip~0 := 0; {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,835 INFO L273 TraceCheckUtils]: 93: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !false; {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,837 INFO L273 TraceCheckUtils]: 94: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:41,839 INFO L273 TraceCheckUtils]: 95: Hoare triple {102383#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102384#(= |ssl3_accept_#t~mem25| 8672)} is VALID [2018-11-23 12:49:41,839 INFO L273 TraceCheckUtils]: 96: Hoare triple {102384#(= |ssl3_accept_#t~mem25| 8672)} assume 16384 == #t~mem25;havoc #t~mem25; {102382#false} is VALID [2018-11-23 12:49:41,839 INFO L273 TraceCheckUtils]: 97: Hoare triple {102382#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,839 INFO L273 TraceCheckUtils]: 98: Hoare triple {102382#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {102382#false} is VALID [2018-11-23 12:49:41,839 INFO L273 TraceCheckUtils]: 99: Hoare triple {102382#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,839 INFO L273 TraceCheckUtils]: 100: Hoare triple {102382#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 101: Hoare triple {102382#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 102: Hoare triple {102382#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 103: Hoare triple {102382#false} assume 12292 != #t~mem62;havoc #t~mem62; {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 104: Hoare triple {102382#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 105: Hoare triple {102382#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 106: Hoare triple {102382#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 107: Hoare triple {102382#false} ~skip~0 := 0; {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 108: Hoare triple {102382#false} assume !false; {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 109: Hoare triple {102382#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,840 INFO L273 TraceCheckUtils]: 110: Hoare triple {102382#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 111: Hoare triple {102382#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 112: Hoare triple {102382#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 113: Hoare triple {102382#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 114: Hoare triple {102382#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 115: Hoare triple {102382#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 116: Hoare triple {102382#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 117: Hoare triple {102382#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 118: Hoare triple {102382#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 119: Hoare triple {102382#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,841 INFO L273 TraceCheckUtils]: 120: Hoare triple {102382#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 121: Hoare triple {102382#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 122: Hoare triple {102382#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 123: Hoare triple {102382#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 124: Hoare triple {102382#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 125: Hoare triple {102382#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 126: Hoare triple {102382#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 127: Hoare triple {102382#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 128: Hoare triple {102382#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 129: Hoare triple {102382#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,842 INFO L273 TraceCheckUtils]: 130: Hoare triple {102382#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 131: Hoare triple {102382#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 132: Hoare triple {102382#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 133: Hoare triple {102382#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 134: Hoare triple {102382#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 135: Hoare triple {102382#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 136: Hoare triple {102382#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 137: Hoare triple {102382#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 138: Hoare triple {102382#false} assume 8640 == #t~mem52;havoc #t~mem52; {102382#false} is VALID [2018-11-23 12:49:41,843 INFO L273 TraceCheckUtils]: 139: Hoare triple {102382#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {102382#false} is VALID [2018-11-23 12:49:41,844 INFO L273 TraceCheckUtils]: 140: Hoare triple {102382#false} assume 4 == ~blastFlag~0; {102382#false} is VALID [2018-11-23 12:49:41,844 INFO L273 TraceCheckUtils]: 141: Hoare triple {102382#false} assume !false; {102382#false} is VALID [2018-11-23 12:49:41,851 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 87 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:41,852 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:41,852 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:41,852 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 142 [2018-11-23 12:49:41,852 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:41,852 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:41,967 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 116 edges. 116 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:41,967 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:41,967 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:41,967 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:41,968 INFO L87 Difference]: Start difference. First operand 1337 states and 1992 transitions. Second operand 4 states. [2018-11-23 12:49:50,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:50,399 INFO L93 Difference]: Finished difference Result 2969 states and 4403 transitions. [2018-11-23 12:49:50,399 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:49:50,400 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 142 [2018-11-23 12:49:50,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:50,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:50,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 550 transitions. [2018-11-23 12:49:50,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:50,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 550 transitions. [2018-11-23 12:49:50,404 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 550 transitions. [2018-11-23 12:49:50,976 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 550 edges. 550 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:51,086 INFO L225 Difference]: With dead ends: 2969 [2018-11-23 12:49:51,086 INFO L226 Difference]: Without dead ends: 1657 [2018-11-23 12:49:51,088 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:49:51,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states. [2018-11-23 12:49:54,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1657 to 1337. [2018-11-23 12:49:54,178 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:54,179 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1657 states. Second operand 1337 states. [2018-11-23 12:49:54,179 INFO L74 IsIncluded]: Start isIncluded. First operand 1657 states. Second operand 1337 states. [2018-11-23 12:49:54,179 INFO L87 Difference]: Start difference. First operand 1657 states. Second operand 1337 states. [2018-11-23 12:49:54,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:54,283 INFO L93 Difference]: Finished difference Result 1657 states and 2434 transitions. [2018-11-23 12:49:54,283 INFO L276 IsEmpty]: Start isEmpty. Operand 1657 states and 2434 transitions. [2018-11-23 12:49:54,284 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:54,285 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:54,285 INFO L74 IsIncluded]: Start isIncluded. First operand 1337 states. Second operand 1657 states. [2018-11-23 12:49:54,285 INFO L87 Difference]: Start difference. First operand 1337 states. Second operand 1657 states. [2018-11-23 12:49:54,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:54,377 INFO L93 Difference]: Finished difference Result 1657 states and 2434 transitions. [2018-11-23 12:49:54,377 INFO L276 IsEmpty]: Start isEmpty. Operand 1657 states and 2434 transitions. [2018-11-23 12:49:54,378 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:54,378 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:54,378 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:54,378 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:54,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1337 states. [2018-11-23 12:49:54,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1337 states to 1337 states and 1987 transitions. [2018-11-23 12:49:54,440 INFO L78 Accepts]: Start accepts. Automaton has 1337 states and 1987 transitions. Word has length 142 [2018-11-23 12:49:54,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:54,441 INFO L480 AbstractCegarLoop]: Abstraction has 1337 states and 1987 transitions. [2018-11-23 12:49:54,441 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:49:54,441 INFO L276 IsEmpty]: Start isEmpty. Operand 1337 states and 1987 transitions. [2018-11-23 12:49:54,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2018-11-23 12:49:54,442 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:54,442 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:54,442 INFO L423 AbstractCegarLoop]: === Iteration 48 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:54,442 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:54,442 INFO L82 PathProgramCache]: Analyzing trace with hash 1771774716, now seen corresponding path program 1 times [2018-11-23 12:49:54,442 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:54,442 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:54,443 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:54,443 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:54,443 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:54,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:54,623 INFO L256 TraceCheckUtils]: 0: Hoare triple {110596#true} call ULTIMATE.init(); {110596#true} is VALID [2018-11-23 12:49:54,623 INFO L273 TraceCheckUtils]: 1: Hoare triple {110596#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,623 INFO L273 TraceCheckUtils]: 2: Hoare triple {110596#true} assume true; {110596#true} is VALID [2018-11-23 12:49:54,624 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {110596#true} {110596#true} #632#return; {110596#true} is VALID [2018-11-23 12:49:54,624 INFO L256 TraceCheckUtils]: 4: Hoare triple {110596#true} call #t~ret138 := main(); {110596#true} is VALID [2018-11-23 12:49:54,624 INFO L273 TraceCheckUtils]: 5: Hoare triple {110596#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,624 INFO L256 TraceCheckUtils]: 6: Hoare triple {110596#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {110596#true} is VALID [2018-11-23 12:49:54,624 INFO L273 TraceCheckUtils]: 7: Hoare triple {110596#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,624 INFO L273 TraceCheckUtils]: 8: Hoare triple {110596#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 9: Hoare triple {110596#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 10: Hoare triple {110596#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 11: Hoare triple {110596#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 12: Hoare triple {110596#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 13: Hoare triple {110596#true} assume !false; {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 14: Hoare triple {110596#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 15: Hoare triple {110596#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 16: Hoare triple {110596#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 17: Hoare triple {110596#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,625 INFO L273 TraceCheckUtils]: 18: Hoare triple {110596#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 19: Hoare triple {110596#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 20: Hoare triple {110596#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 21: Hoare triple {110596#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 22: Hoare triple {110596#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 23: Hoare triple {110596#true} assume 8464 == #t~mem32;havoc #t~mem32; {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 24: Hoare triple {110596#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 25: Hoare triple {110596#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 26: Hoare triple {110596#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 27: Hoare triple {110596#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,626 INFO L273 TraceCheckUtils]: 28: Hoare triple {110596#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 29: Hoare triple {110596#true} ~skip~0 := 0; {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 30: Hoare triple {110596#true} assume !false; {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 31: Hoare triple {110596#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 32: Hoare triple {110596#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 33: Hoare triple {110596#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 34: Hoare triple {110596#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 35: Hoare triple {110596#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 36: Hoare triple {110596#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 37: Hoare triple {110596#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,627 INFO L273 TraceCheckUtils]: 38: Hoare triple {110596#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 39: Hoare triple {110596#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 40: Hoare triple {110596#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 41: Hoare triple {110596#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 42: Hoare triple {110596#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 43: Hoare triple {110596#true} assume 8496 == #t~mem35;havoc #t~mem35; {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 44: Hoare triple {110596#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 45: Hoare triple {110596#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 46: Hoare triple {110596#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,628 INFO L273 TraceCheckUtils]: 47: Hoare triple {110596#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 48: Hoare triple {110596#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 49: Hoare triple {110596#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 50: Hoare triple {110596#true} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 51: Hoare triple {110596#true} ~skip~0 := 0; {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 52: Hoare triple {110596#true} assume !false; {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 53: Hoare triple {110596#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 54: Hoare triple {110596#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 55: Hoare triple {110596#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 56: Hoare triple {110596#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,629 INFO L273 TraceCheckUtils]: 57: Hoare triple {110596#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 58: Hoare triple {110596#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 59: Hoare triple {110596#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 60: Hoare triple {110596#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 61: Hoare triple {110596#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 62: Hoare triple {110596#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 63: Hoare triple {110596#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 64: Hoare triple {110596#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 65: Hoare triple {110596#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 66: Hoare triple {110596#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,630 INFO L273 TraceCheckUtils]: 67: Hoare triple {110596#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 68: Hoare triple {110596#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 69: Hoare triple {110596#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 70: Hoare triple {110596#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 71: Hoare triple {110596#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 72: Hoare triple {110596#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 73: Hoare triple {110596#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 74: Hoare triple {110596#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,631 INFO L273 TraceCheckUtils]: 75: Hoare triple {110596#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,632 INFO L273 TraceCheckUtils]: 76: Hoare triple {110596#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,632 INFO L273 TraceCheckUtils]: 77: Hoare triple {110596#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,632 INFO L273 TraceCheckUtils]: 78: Hoare triple {110596#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,632 INFO L273 TraceCheckUtils]: 79: Hoare triple {110596#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,632 INFO L273 TraceCheckUtils]: 80: Hoare triple {110596#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,632 INFO L273 TraceCheckUtils]: 81: Hoare triple {110596#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,633 INFO L273 TraceCheckUtils]: 82: Hoare triple {110596#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,633 INFO L273 TraceCheckUtils]: 83: Hoare triple {110596#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {110596#true} is VALID [2018-11-23 12:49:54,633 INFO L273 TraceCheckUtils]: 84: Hoare triple {110596#true} assume 8656 == #t~mem54;havoc #t~mem54; {110596#true} is VALID [2018-11-23 12:49:54,633 INFO L273 TraceCheckUtils]: 85: Hoare triple {110596#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem118.base, #t~mem118.offset; {110596#true} is VALID [2018-11-23 12:49:54,633 INFO L273 TraceCheckUtils]: 86: Hoare triple {110596#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {110596#true} is VALID [2018-11-23 12:49:54,633 INFO L273 TraceCheckUtils]: 87: Hoare triple {110596#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {110596#true} is VALID [2018-11-23 12:49:54,637 INFO L273 TraceCheckUtils]: 88: Hoare triple {110596#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,637 INFO L273 TraceCheckUtils]: 89: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == ~tmp___10~0); {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,638 INFO L273 TraceCheckUtils]: 90: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,638 INFO L273 TraceCheckUtils]: 91: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,640 INFO L273 TraceCheckUtils]: 92: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} ~skip~0 := 0; {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,640 INFO L273 TraceCheckUtils]: 93: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !false; {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,642 INFO L273 TraceCheckUtils]: 94: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,642 INFO L273 TraceCheckUtils]: 95: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} is VALID [2018-11-23 12:49:54,644 INFO L273 TraceCheckUtils]: 96: Hoare triple {110598#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8672)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {110599#(= |ssl3_accept_#t~mem26| 8672)} is VALID [2018-11-23 12:49:54,644 INFO L273 TraceCheckUtils]: 97: Hoare triple {110599#(= |ssl3_accept_#t~mem26| 8672)} assume 8192 == #t~mem26;havoc #t~mem26; {110597#false} is VALID [2018-11-23 12:49:54,644 INFO L273 TraceCheckUtils]: 98: Hoare triple {110597#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,644 INFO L273 TraceCheckUtils]: 99: Hoare triple {110597#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {110597#false} is VALID [2018-11-23 12:49:54,644 INFO L273 TraceCheckUtils]: 100: Hoare triple {110597#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,644 INFO L273 TraceCheckUtils]: 101: Hoare triple {110597#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 102: Hoare triple {110597#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 103: Hoare triple {110597#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 104: Hoare triple {110597#false} assume 12292 != #t~mem62;havoc #t~mem62; {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 105: Hoare triple {110597#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem63.base, #t~mem63.offset;havoc #t~mem64; {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 106: Hoare triple {110597#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 107: Hoare triple {110597#false} assume !(0 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 108: Hoare triple {110597#false} ~skip~0 := 0; {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 109: Hoare triple {110597#false} assume !false; {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 110: Hoare triple {110597#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,645 INFO L273 TraceCheckUtils]: 111: Hoare triple {110597#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 112: Hoare triple {110597#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 113: Hoare triple {110597#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 114: Hoare triple {110597#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 115: Hoare triple {110597#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 116: Hoare triple {110597#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 117: Hoare triple {110597#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 118: Hoare triple {110597#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 119: Hoare triple {110597#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 120: Hoare triple {110597#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,646 INFO L273 TraceCheckUtils]: 121: Hoare triple {110597#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 122: Hoare triple {110597#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 123: Hoare triple {110597#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 124: Hoare triple {110597#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 125: Hoare triple {110597#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 126: Hoare triple {110597#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 127: Hoare triple {110597#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 128: Hoare triple {110597#false} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 129: Hoare triple {110597#false} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,647 INFO L273 TraceCheckUtils]: 130: Hoare triple {110597#false} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 131: Hoare triple {110597#false} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 132: Hoare triple {110597#false} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 133: Hoare triple {110597#false} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 134: Hoare triple {110597#false} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 135: Hoare triple {110597#false} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 136: Hoare triple {110597#false} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 137: Hoare triple {110597#false} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 138: Hoare triple {110597#false} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 139: Hoare triple {110597#false} assume 8640 == #t~mem52;havoc #t~mem52; {110597#false} is VALID [2018-11-23 12:49:54,648 INFO L273 TraceCheckUtils]: 140: Hoare triple {110597#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {110597#false} is VALID [2018-11-23 12:49:54,649 INFO L273 TraceCheckUtils]: 141: Hoare triple {110597#false} assume 4 == ~blastFlag~0; {110597#false} is VALID [2018-11-23 12:49:54,649 INFO L273 TraceCheckUtils]: 142: Hoare triple {110597#false} assume !false; {110597#false} is VALID [2018-11-23 12:49:54,657 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 91 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:54,657 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:54,657 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:54,657 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 143 [2018-11-23 12:49:54,657 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:54,658 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:54,796 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 117 edges. 117 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:54,796 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:54,797 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:54,797 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:54,797 INFO L87 Difference]: Start difference. First operand 1337 states and 1987 transitions. Second operand 4 states. [2018-11-23 12:50:04,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:50:04,564 INFO L93 Difference]: Finished difference Result 2969 states and 4393 transitions. [2018-11-23 12:50:04,564 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:50:04,564 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 143 [2018-11-23 12:50:04,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:50:04,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:50:04,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 549 transitions. [2018-11-23 12:50:04,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:50:04,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 549 transitions. [2018-11-23 12:50:04,569 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 549 transitions. [2018-11-23 12:50:05,235 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 549 edges. 549 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:50:05,347 INFO L225 Difference]: With dead ends: 2969 [2018-11-23 12:50:05,347 INFO L226 Difference]: Without dead ends: 1657 [2018-11-23 12:50:05,349 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:50:05,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1657 states.