java -ea -Xmx8000000000 -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc ../../../trunk/examples/toolchains/AutomizerCInline_WitnessPrinter.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-61f4311 [2018-11-23 12:47:12,439 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 12:47:12,441 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 12:47:12,458 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 12:47:12,458 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 12:47:12,459 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 12:47:12,460 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 12:47:12,462 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 12:47:12,464 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 12:47:12,465 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 12:47:12,466 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 12:47:12,466 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 12:47:12,467 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 12:47:12,468 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 12:47:12,469 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 12:47:12,470 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 12:47:12,471 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 12:47:12,473 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 12:47:12,475 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 12:47:12,476 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 12:47:12,477 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 12:47:12,479 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 12:47:12,481 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 12:47:12,481 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 12:47:12,482 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 12:47:12,483 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 12:47:12,484 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 12:47:12,484 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 12:47:12,485 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 12:47:12,486 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 12:47:12,487 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 12:47:12,487 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 12:47:12,488 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 12:47:12,488 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 12:47:12,489 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 12:47:12,490 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 12:47:12,490 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 12:47:12,515 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 12:47:12,516 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 12:47:12,516 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 12:47:12,517 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 12:47:12,517 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 12:47:12,518 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 12:47:12,518 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 12:47:12,518 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 12:47:12,518 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 12:47:12,518 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 12:47:12,519 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 12:47:12,519 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 12:47:12,519 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 12:47:12,519 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 12:47:12,519 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 12:47:12,520 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 12:47:12,520 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 12:47:12,520 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 12:47:12,520 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 12:47:12,520 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 12:47:12,521 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 12:47:12,521 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 12:47:12,521 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 12:47:12,521 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:47:12,522 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 12:47:12,522 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 12:47:12,522 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 12:47:12,522 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 12:47:12,522 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 12:47:12,523 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 12:47:12,523 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 12:47:12,591 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 12:47:12,605 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 12:47:12,609 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 12:47:12,610 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 12:47:12,611 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 12:47:12,612 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 12:47:12,676 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d46c21224/6d2195f7b19d47a6824f4e54b1d7ad77/FLAG3dae27727 [2018-11-23 12:47:13,320 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 12:47:13,321 INFO L161 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ssh/s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 12:47:13,354 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d46c21224/6d2195f7b19d47a6824f4e54b1d7ad77/FLAG3dae27727 [2018-11-23 12:47:13,493 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d46c21224/6d2195f7b19d47a6824f4e54b1d7ad77 [2018-11-23 12:47:13,503 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 12:47:13,504 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 12:47:13,505 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 12:47:13,505 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 12:47:13,509 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 12:47:13,511 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:47:13" (1/1) ... [2018-11-23 12:47:13,514 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@20df6540 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:13, skipping insertion in model container [2018-11-23 12:47:13,515 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:47:13" (1/1) ... [2018-11-23 12:47:13,526 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 12:47:13,628 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 12:47:14,261 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:47:14,280 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 12:47:14,550 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 12:47:14,594 INFO L195 MainTranslator]: Completed translation [2018-11-23 12:47:14,595 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14 WrapperNode [2018-11-23 12:47:14,595 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 12:47:14,596 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 12:47:14,597 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 12:47:14,597 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 12:47:14,608 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,654 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,679 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 12:47:14,679 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 12:47:14,680 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 12:47:14,680 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 12:47:14,693 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,693 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,707 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,708 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,785 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,804 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,816 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... [2018-11-23 12:47:14,828 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 12:47:14,832 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 12:47:14,832 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 12:47:14,833 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 12:47:14,834 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 12:47:14,916 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 12:47:14,916 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 12:47:14,916 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 12:47:14,917 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 12:47:14,917 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 12:47:14,917 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 12:47:14,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 12:47:14,917 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 12:47:14,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 12:47:14,918 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 12:47:14,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 12:47:14,918 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 12:47:14,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 12:47:14,919 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 12:47:14,920 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 12:47:15,806 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 12:47:15,806 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 12:47:18,945 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 12:47:18,945 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 12:47:18,946 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:47:18 BoogieIcfgContainer [2018-11-23 12:47:18,946 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 12:47:18,947 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 12:47:18,947 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 12:47:18,951 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 12:47:18,951 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:47:13" (1/3) ... [2018-11-23 12:47:18,952 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d11bcf4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:47:18, skipping insertion in model container [2018-11-23 12:47:18,952 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:47:14" (2/3) ... [2018-11-23 12:47:18,953 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d11bcf4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:47:18, skipping insertion in model container [2018-11-23 12:47:18,953 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:47:18" (3/3) ... [2018-11-23 12:47:18,955 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.11_false-unreach-call.i.cil.c [2018-11-23 12:47:18,964 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 12:47:18,973 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 12:47:18,989 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 12:47:19,023 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 12:47:19,024 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 12:47:19,024 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 12:47:19,024 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 12:47:19,024 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 12:47:19,025 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 12:47:19,025 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 12:47:19,025 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 12:47:19,025 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 12:47:19,049 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states. [2018-11-23 12:47:19,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 12:47:19,060 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:19,061 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:19,064 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:19,070 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:19,070 INFO L82 PathProgramCache]: Analyzing trace with hash -995657757, now seen corresponding path program 1 times [2018-11-23 12:47:19,072 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:19,073 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:19,124 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:19,124 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:19,125 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:19,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:19,706 INFO L256 TraceCheckUtils]: 0: Hoare triple {160#true} call ULTIMATE.init(); {160#true} is VALID [2018-11-23 12:47:19,710 INFO L273 TraceCheckUtils]: 1: Hoare triple {160#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {160#true} is VALID [2018-11-23 12:47:19,711 INFO L273 TraceCheckUtils]: 2: Hoare triple {160#true} assume true; {160#true} is VALID [2018-11-23 12:47:19,712 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {160#true} {160#true} #633#return; {160#true} is VALID [2018-11-23 12:47:19,712 INFO L256 TraceCheckUtils]: 4: Hoare triple {160#true} call #t~ret138 := main(); {160#true} is VALID [2018-11-23 12:47:19,713 INFO L273 TraceCheckUtils]: 5: Hoare triple {160#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {160#true} is VALID [2018-11-23 12:47:19,713 INFO L256 TraceCheckUtils]: 6: Hoare triple {160#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {160#true} is VALID [2018-11-23 12:47:19,726 INFO L273 TraceCheckUtils]: 7: Hoare triple {160#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,736 INFO L273 TraceCheckUtils]: 8: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,749 INFO L273 TraceCheckUtils]: 9: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,763 INFO L273 TraceCheckUtils]: 10: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,776 INFO L273 TraceCheckUtils]: 11: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,789 INFO L273 TraceCheckUtils]: 12: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,802 INFO L273 TraceCheckUtils]: 13: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !false; {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,815 INFO L273 TraceCheckUtils]: 14: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,829 INFO L273 TraceCheckUtils]: 15: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,842 INFO L273 TraceCheckUtils]: 16: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,855 INFO L273 TraceCheckUtils]: 17: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,868 INFO L273 TraceCheckUtils]: 18: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,881 INFO L273 TraceCheckUtils]: 19: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,895 INFO L273 TraceCheckUtils]: 20: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,908 INFO L273 TraceCheckUtils]: 21: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:19,921 INFO L273 TraceCheckUtils]: 22: Hoare triple {162#(= 8464 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {163#(= 8464 |ssl3_accept_#t~mem32|)} is VALID [2018-11-23 12:47:19,935 INFO L273 TraceCheckUtils]: 23: Hoare triple {163#(= 8464 |ssl3_accept_#t~mem32|)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,936 INFO L273 TraceCheckUtils]: 24: Hoare triple {161#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,936 INFO L273 TraceCheckUtils]: 25: Hoare triple {161#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,936 INFO L273 TraceCheckUtils]: 26: Hoare triple {161#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,937 INFO L273 TraceCheckUtils]: 27: Hoare triple {161#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,937 INFO L273 TraceCheckUtils]: 28: Hoare triple {161#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,938 INFO L273 TraceCheckUtils]: 29: Hoare triple {161#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,939 INFO L273 TraceCheckUtils]: 30: Hoare triple {161#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,939 INFO L273 TraceCheckUtils]: 31: Hoare triple {161#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,940 INFO L273 TraceCheckUtils]: 32: Hoare triple {161#false} assume 8544 == #t~mem41;havoc #t~mem41; {161#false} is VALID [2018-11-23 12:47:19,940 INFO L273 TraceCheckUtils]: 33: Hoare triple {161#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,940 INFO L273 TraceCheckUtils]: 34: Hoare triple {161#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,941 INFO L273 TraceCheckUtils]: 35: Hoare triple {161#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {161#false} is VALID [2018-11-23 12:47:19,941 INFO L273 TraceCheckUtils]: 36: Hoare triple {161#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {161#false} is VALID [2018-11-23 12:47:19,941 INFO L273 TraceCheckUtils]: 37: Hoare triple {161#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {161#false} is VALID [2018-11-23 12:47:19,942 INFO L273 TraceCheckUtils]: 38: Hoare triple {161#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {161#false} is VALID [2018-11-23 12:47:19,942 INFO L273 TraceCheckUtils]: 39: Hoare triple {161#false} assume 7 == ~blastFlag~0; {161#false} is VALID [2018-11-23 12:47:19,942 INFO L273 TraceCheckUtils]: 40: Hoare triple {161#false} assume !false; {161#false} is VALID [2018-11-23 12:47:19,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:19,960 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:19,960 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:19,965 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 41 [2018-11-23 12:47:19,969 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:19,973 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:20,190 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:20,190 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:20,199 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:20,200 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:20,202 INFO L87 Difference]: Start difference. First operand 157 states. Second operand 4 states. [2018-11-23 12:47:22,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:22,414 INFO L93 Difference]: Finished difference Result 333 states and 558 transitions. [2018-11-23 12:47:22,414 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:22,414 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 41 [2018-11-23 12:47:22,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:22,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:22,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 558 transitions. [2018-11-23 12:47:22,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:22,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 558 transitions. [2018-11-23 12:47:22,454 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 558 transitions. [2018-11-23 12:47:23,434 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 558 edges. 558 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:23,471 INFO L225 Difference]: With dead ends: 333 [2018-11-23 12:47:23,471 INFO L226 Difference]: Without dead ends: 169 [2018-11-23 12:47:23,478 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:23,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2018-11-23 12:47:23,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 152. [2018-11-23 12:47:23,627 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:23,628 INFO L82 GeneralOperation]: Start isEquivalent. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:23,629 INFO L74 IsIncluded]: Start isIncluded. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:23,629 INFO L87 Difference]: Start difference. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:23,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:23,640 INFO L93 Difference]: Finished difference Result 169 states and 253 transitions. [2018-11-23 12:47:23,640 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 253 transitions. [2018-11-23 12:47:23,642 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:23,643 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:23,643 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:23,643 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:23,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:23,654 INFO L93 Difference]: Finished difference Result 169 states and 253 transitions. [2018-11-23 12:47:23,654 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 253 transitions. [2018-11-23 12:47:23,656 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:23,656 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:23,657 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:23,657 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:23,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2018-11-23 12:47:23,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 232 transitions. [2018-11-23 12:47:23,666 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 232 transitions. Word has length 41 [2018-11-23 12:47:23,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:23,667 INFO L480 AbstractCegarLoop]: Abstraction has 152 states and 232 transitions. [2018-11-23 12:47:23,667 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:23,667 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 232 transitions. [2018-11-23 12:47:23,670 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-11-23 12:47:23,670 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:23,670 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:23,671 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:23,671 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:23,671 INFO L82 PathProgramCache]: Analyzing trace with hash -1978591950, now seen corresponding path program 1 times [2018-11-23 12:47:23,671 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:23,672 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:23,673 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:23,674 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:23,674 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:23,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:23,938 INFO L256 TraceCheckUtils]: 0: Hoare triple {1086#true} call ULTIMATE.init(); {1086#true} is VALID [2018-11-23 12:47:23,939 INFO L273 TraceCheckUtils]: 1: Hoare triple {1086#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1086#true} is VALID [2018-11-23 12:47:23,939 INFO L273 TraceCheckUtils]: 2: Hoare triple {1086#true} assume true; {1086#true} is VALID [2018-11-23 12:47:23,939 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1086#true} {1086#true} #633#return; {1086#true} is VALID [2018-11-23 12:47:23,940 INFO L256 TraceCheckUtils]: 4: Hoare triple {1086#true} call #t~ret138 := main(); {1086#true} is VALID [2018-11-23 12:47:23,940 INFO L273 TraceCheckUtils]: 5: Hoare triple {1086#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {1086#true} is VALID [2018-11-23 12:47:23,940 INFO L256 TraceCheckUtils]: 6: Hoare triple {1086#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1086#true} is VALID [2018-11-23 12:47:23,961 INFO L273 TraceCheckUtils]: 7: Hoare triple {1086#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:23,977 INFO L273 TraceCheckUtils]: 8: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:23,992 INFO L273 TraceCheckUtils]: 9: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,008 INFO L273 TraceCheckUtils]: 10: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,023 INFO L273 TraceCheckUtils]: 11: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,026 INFO L273 TraceCheckUtils]: 12: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,027 INFO L273 TraceCheckUtils]: 13: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,032 INFO L273 TraceCheckUtils]: 14: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,032 INFO L273 TraceCheckUtils]: 15: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,033 INFO L273 TraceCheckUtils]: 16: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,034 INFO L273 TraceCheckUtils]: 17: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,034 INFO L273 TraceCheckUtils]: 18: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:24,035 INFO L273 TraceCheckUtils]: 19: Hoare triple {1088#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1089#(= |ssl3_accept_#t~mem29| 8464)} is VALID [2018-11-23 12:47:24,036 INFO L273 TraceCheckUtils]: 20: Hoare triple {1089#(= |ssl3_accept_#t~mem29| 8464)} assume 8480 == #t~mem29;havoc #t~mem29; {1087#false} is VALID [2018-11-23 12:47:24,036 INFO L273 TraceCheckUtils]: 21: Hoare triple {1087#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {1087#false} is VALID [2018-11-23 12:47:24,037 INFO L273 TraceCheckUtils]: 22: Hoare triple {1087#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,038 INFO L273 TraceCheckUtils]: 23: Hoare triple {1087#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,038 INFO L273 TraceCheckUtils]: 24: Hoare triple {1087#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1087#false} is VALID [2018-11-23 12:47:24,039 INFO L273 TraceCheckUtils]: 25: Hoare triple {1087#false} ~skip~0 := 0; {1087#false} is VALID [2018-11-23 12:47:24,039 INFO L273 TraceCheckUtils]: 26: Hoare triple {1087#false} assume !false; {1087#false} is VALID [2018-11-23 12:47:24,039 INFO L273 TraceCheckUtils]: 27: Hoare triple {1087#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,040 INFO L273 TraceCheckUtils]: 28: Hoare triple {1087#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,040 INFO L273 TraceCheckUtils]: 29: Hoare triple {1087#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,040 INFO L273 TraceCheckUtils]: 30: Hoare triple {1087#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,041 INFO L273 TraceCheckUtils]: 31: Hoare triple {1087#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,041 INFO L273 TraceCheckUtils]: 32: Hoare triple {1087#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,041 INFO L273 TraceCheckUtils]: 33: Hoare triple {1087#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,042 INFO L273 TraceCheckUtils]: 34: Hoare triple {1087#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,042 INFO L273 TraceCheckUtils]: 35: Hoare triple {1087#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,042 INFO L273 TraceCheckUtils]: 36: Hoare triple {1087#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,043 INFO L273 TraceCheckUtils]: 37: Hoare triple {1087#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,043 INFO L273 TraceCheckUtils]: 38: Hoare triple {1087#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,043 INFO L273 TraceCheckUtils]: 39: Hoare triple {1087#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,044 INFO L273 TraceCheckUtils]: 40: Hoare triple {1087#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,044 INFO L273 TraceCheckUtils]: 41: Hoare triple {1087#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,045 INFO L273 TraceCheckUtils]: 42: Hoare triple {1087#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,045 INFO L273 TraceCheckUtils]: 43: Hoare triple {1087#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,045 INFO L273 TraceCheckUtils]: 44: Hoare triple {1087#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,046 INFO L273 TraceCheckUtils]: 45: Hoare triple {1087#false} assume 8544 == #t~mem41;havoc #t~mem41; {1087#false} is VALID [2018-11-23 12:47:24,046 INFO L273 TraceCheckUtils]: 46: Hoare triple {1087#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,046 INFO L273 TraceCheckUtils]: 47: Hoare triple {1087#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,047 INFO L273 TraceCheckUtils]: 48: Hoare triple {1087#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {1087#false} is VALID [2018-11-23 12:47:24,047 INFO L273 TraceCheckUtils]: 49: Hoare triple {1087#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {1087#false} is VALID [2018-11-23 12:47:24,047 INFO L273 TraceCheckUtils]: 50: Hoare triple {1087#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {1087#false} is VALID [2018-11-23 12:47:24,048 INFO L273 TraceCheckUtils]: 51: Hoare triple {1087#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {1087#false} is VALID [2018-11-23 12:47:24,048 INFO L273 TraceCheckUtils]: 52: Hoare triple {1087#false} assume 7 == ~blastFlag~0; {1087#false} is VALID [2018-11-23 12:47:24,048 INFO L273 TraceCheckUtils]: 53: Hoare triple {1087#false} assume !false; {1087#false} is VALID [2018-11-23 12:47:24,057 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:24,058 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:24,058 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:24,060 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 54 [2018-11-23 12:47:24,060 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:24,060 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:24,168 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:24,168 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:24,168 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:24,169 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:24,169 INFO L87 Difference]: Start difference. First operand 152 states and 232 transitions. Second operand 4 states. [2018-11-23 12:47:25,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:25,741 INFO L93 Difference]: Finished difference Result 296 states and 449 transitions. [2018-11-23 12:47:25,742 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:25,742 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 54 [2018-11-23 12:47:25,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:25,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:25,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-23 12:47:25,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:25,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 449 transitions. [2018-11-23 12:47:25,754 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 449 transitions. [2018-11-23 12:47:26,561 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 449 edges. 449 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:26,567 INFO L225 Difference]: With dead ends: 296 [2018-11-23 12:47:26,567 INFO L226 Difference]: Without dead ends: 169 [2018-11-23 12:47:26,569 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:26,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2018-11-23 12:47:26,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 152. [2018-11-23 12:47:26,613 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:26,613 INFO L82 GeneralOperation]: Start isEquivalent. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:26,613 INFO L74 IsIncluded]: Start isIncluded. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:26,613 INFO L87 Difference]: Start difference. First operand 169 states. Second operand 152 states. [2018-11-23 12:47:26,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,621 INFO L93 Difference]: Finished difference Result 169 states and 252 transitions. [2018-11-23 12:47:26,621 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 252 transitions. [2018-11-23 12:47:26,622 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:26,623 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:26,623 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:26,623 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 169 states. [2018-11-23 12:47:26,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:26,630 INFO L93 Difference]: Finished difference Result 169 states and 252 transitions. [2018-11-23 12:47:26,631 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 252 transitions. [2018-11-23 12:47:26,632 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:26,632 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:26,632 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:26,632 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:26,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2018-11-23 12:47:26,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 231 transitions. [2018-11-23 12:47:26,639 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 231 transitions. Word has length 54 [2018-11-23 12:47:26,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:26,639 INFO L480 AbstractCegarLoop]: Abstraction has 152 states and 231 transitions. [2018-11-23 12:47:26,640 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:26,640 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 231 transitions. [2018-11-23 12:47:26,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:47:26,641 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:26,642 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:26,642 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:26,642 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:26,642 INFO L82 PathProgramCache]: Analyzing trace with hash -659098542, now seen corresponding path program 1 times [2018-11-23 12:47:26,643 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:26,643 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:26,644 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:26,644 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:26,644 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:26,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:26,889 INFO L256 TraceCheckUtils]: 0: Hoare triple {1968#true} call ULTIMATE.init(); {1968#true} is VALID [2018-11-23 12:47:26,890 INFO L273 TraceCheckUtils]: 1: Hoare triple {1968#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {1968#true} is VALID [2018-11-23 12:47:26,890 INFO L273 TraceCheckUtils]: 2: Hoare triple {1968#true} assume true; {1968#true} is VALID [2018-11-23 12:47:26,890 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {1968#true} {1968#true} #633#return; {1968#true} is VALID [2018-11-23 12:47:26,891 INFO L256 TraceCheckUtils]: 4: Hoare triple {1968#true} call #t~ret138 := main(); {1968#true} is VALID [2018-11-23 12:47:26,891 INFO L273 TraceCheckUtils]: 5: Hoare triple {1968#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {1968#true} is VALID [2018-11-23 12:47:26,891 INFO L256 TraceCheckUtils]: 6: Hoare triple {1968#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {1968#true} is VALID [2018-11-23 12:47:26,891 INFO L273 TraceCheckUtils]: 7: Hoare triple {1968#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {1968#true} is VALID [2018-11-23 12:47:26,892 INFO L273 TraceCheckUtils]: 8: Hoare triple {1968#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {1968#true} is VALID [2018-11-23 12:47:26,892 INFO L273 TraceCheckUtils]: 9: Hoare triple {1968#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {1968#true} is VALID [2018-11-23 12:47:26,892 INFO L273 TraceCheckUtils]: 10: Hoare triple {1968#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {1968#true} is VALID [2018-11-23 12:47:26,892 INFO L273 TraceCheckUtils]: 11: Hoare triple {1968#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {1968#true} is VALID [2018-11-23 12:47:26,893 INFO L273 TraceCheckUtils]: 12: Hoare triple {1968#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {1968#true} is VALID [2018-11-23 12:47:26,893 INFO L273 TraceCheckUtils]: 13: Hoare triple {1968#true} assume !false; {1968#true} is VALID [2018-11-23 12:47:26,898 INFO L273 TraceCheckUtils]: 14: Hoare triple {1968#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1970#(= |ssl3_accept_#t~mem24| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:26,899 INFO L273 TraceCheckUtils]: 15: Hoare triple {1970#(= |ssl3_accept_#t~mem24| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,899 INFO L273 TraceCheckUtils]: 16: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem25;havoc #t~mem25; {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,900 INFO L273 TraceCheckUtils]: 17: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} call write~int(1, ~s.base, 36 + ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,901 INFO L273 TraceCheckUtils]: 18: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,901 INFO L273 TraceCheckUtils]: 19: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,903 INFO L273 TraceCheckUtils]: 20: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,905 INFO L273 TraceCheckUtils]: 21: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:26,906 INFO L273 TraceCheckUtils]: 22: Hoare triple {1971#(not (= 12292 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {1972#(not (= 12292 |ssl3_accept_#t~mem62|))} is VALID [2018-11-23 12:47:26,907 INFO L273 TraceCheckUtils]: 23: Hoare triple {1972#(not (= 12292 |ssl3_accept_#t~mem62|))} assume !(12292 != #t~mem62);havoc #t~mem62;call #t~mem65.base, #t~mem65.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem66 := read~int(#t~mem65.base, 76 + #t~mem65.offset, 4);call write~int(1 + #t~mem66, #t~mem65.base, 76 + #t~mem65.offset, 4);havoc #t~mem65.base, #t~mem65.offset;havoc #t~mem66;call write~int(8480, ~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,907 INFO L273 TraceCheckUtils]: 24: Hoare triple {1969#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,907 INFO L273 TraceCheckUtils]: 25: Hoare triple {1969#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {1969#false} is VALID [2018-11-23 12:47:26,908 INFO L273 TraceCheckUtils]: 26: Hoare triple {1969#false} ~skip~0 := 0; {1969#false} is VALID [2018-11-23 12:47:26,908 INFO L273 TraceCheckUtils]: 27: Hoare triple {1969#false} assume !false; {1969#false} is VALID [2018-11-23 12:47:26,908 INFO L273 TraceCheckUtils]: 28: Hoare triple {1969#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,908 INFO L273 TraceCheckUtils]: 29: Hoare triple {1969#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,909 INFO L273 TraceCheckUtils]: 30: Hoare triple {1969#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,909 INFO L273 TraceCheckUtils]: 31: Hoare triple {1969#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,909 INFO L273 TraceCheckUtils]: 32: Hoare triple {1969#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,910 INFO L273 TraceCheckUtils]: 33: Hoare triple {1969#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,910 INFO L273 TraceCheckUtils]: 34: Hoare triple {1969#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,911 INFO L273 TraceCheckUtils]: 35: Hoare triple {1969#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,911 INFO L273 TraceCheckUtils]: 36: Hoare triple {1969#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,911 INFO L273 TraceCheckUtils]: 37: Hoare triple {1969#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,911 INFO L273 TraceCheckUtils]: 38: Hoare triple {1969#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,912 INFO L273 TraceCheckUtils]: 39: Hoare triple {1969#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,912 INFO L273 TraceCheckUtils]: 40: Hoare triple {1969#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,912 INFO L273 TraceCheckUtils]: 41: Hoare triple {1969#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,912 INFO L273 TraceCheckUtils]: 42: Hoare triple {1969#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,913 INFO L273 TraceCheckUtils]: 43: Hoare triple {1969#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,913 INFO L273 TraceCheckUtils]: 44: Hoare triple {1969#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,913 INFO L273 TraceCheckUtils]: 45: Hoare triple {1969#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,913 INFO L273 TraceCheckUtils]: 46: Hoare triple {1969#false} assume 8544 == #t~mem41;havoc #t~mem41; {1969#false} is VALID [2018-11-23 12:47:26,914 INFO L273 TraceCheckUtils]: 47: Hoare triple {1969#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,914 INFO L273 TraceCheckUtils]: 48: Hoare triple {1969#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,914 INFO L273 TraceCheckUtils]: 49: Hoare triple {1969#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {1969#false} is VALID [2018-11-23 12:47:26,914 INFO L273 TraceCheckUtils]: 50: Hoare triple {1969#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {1969#false} is VALID [2018-11-23 12:47:26,915 INFO L273 TraceCheckUtils]: 51: Hoare triple {1969#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {1969#false} is VALID [2018-11-23 12:47:26,915 INFO L273 TraceCheckUtils]: 52: Hoare triple {1969#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {1969#false} is VALID [2018-11-23 12:47:26,915 INFO L273 TraceCheckUtils]: 53: Hoare triple {1969#false} assume 7 == ~blastFlag~0; {1969#false} is VALID [2018-11-23 12:47:26,915 INFO L273 TraceCheckUtils]: 54: Hoare triple {1969#false} assume !false; {1969#false} is VALID [2018-11-23 12:47:26,920 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:26,920 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:26,920 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 12:47:26,921 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2018-11-23 12:47:26,921 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:26,921 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2018-11-23 12:47:27,014 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:27,015 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 12:47:27,015 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 12:47:27,015 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:27,016 INFO L87 Difference]: Start difference. First operand 152 states and 231 transitions. Second operand 5 states. [2018-11-23 12:47:28,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:28,920 INFO L93 Difference]: Finished difference Result 300 states and 457 transitions. [2018-11-23 12:47:28,920 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 12:47:28,920 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2018-11-23 12:47:28,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:28,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:47:28,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 439 transitions. [2018-11-23 12:47:28,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-23 12:47:28,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 439 transitions. [2018-11-23 12:47:28,933 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 439 transitions. [2018-11-23 12:47:29,490 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:29,496 INFO L225 Difference]: With dead ends: 300 [2018-11-23 12:47:29,496 INFO L226 Difference]: Without dead ends: 173 [2018-11-23 12:47:29,497 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:47:29,498 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2018-11-23 12:47:29,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 172. [2018-11-23 12:47:29,585 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:29,585 INFO L82 GeneralOperation]: Start isEquivalent. First operand 173 states. Second operand 172 states. [2018-11-23 12:47:29,585 INFO L74 IsIncluded]: Start isIncluded. First operand 173 states. Second operand 172 states. [2018-11-23 12:47:29,585 INFO L87 Difference]: Start difference. First operand 173 states. Second operand 172 states. [2018-11-23 12:47:29,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,593 INFO L93 Difference]: Finished difference Result 173 states and 258 transitions. [2018-11-23 12:47:29,594 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 258 transitions. [2018-11-23 12:47:29,594 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,594 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,595 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 173 states. [2018-11-23 12:47:29,595 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 173 states. [2018-11-23 12:47:29,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:29,602 INFO L93 Difference]: Finished difference Result 173 states and 258 transitions. [2018-11-23 12:47:29,602 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 258 transitions. [2018-11-23 12:47:29,602 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:29,603 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:29,603 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:29,603 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:29,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:29,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 257 transitions. [2018-11-23 12:47:29,610 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 257 transitions. Word has length 55 [2018-11-23 12:47:29,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:29,610 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 257 transitions. [2018-11-23 12:47:29,610 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 12:47:29,610 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 257 transitions. [2018-11-23 12:47:29,611 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:47:29,612 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:29,612 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:29,612 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:29,612 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:29,613 INFO L82 PathProgramCache]: Analyzing trace with hash 1162543817, now seen corresponding path program 1 times [2018-11-23 12:47:29,613 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:29,613 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:29,614 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,614 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:29,615 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:29,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:30,061 INFO L256 TraceCheckUtils]: 0: Hoare triple {2886#true} call ULTIMATE.init(); {2886#true} is VALID [2018-11-23 12:47:30,062 INFO L273 TraceCheckUtils]: 1: Hoare triple {2886#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {2886#true} is VALID [2018-11-23 12:47:30,063 INFO L273 TraceCheckUtils]: 2: Hoare triple {2886#true} assume true; {2886#true} is VALID [2018-11-23 12:47:30,063 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {2886#true} {2886#true} #633#return; {2886#true} is VALID [2018-11-23 12:47:30,064 INFO L256 TraceCheckUtils]: 4: Hoare triple {2886#true} call #t~ret138 := main(); {2886#true} is VALID [2018-11-23 12:47:30,064 INFO L273 TraceCheckUtils]: 5: Hoare triple {2886#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {2886#true} is VALID [2018-11-23 12:47:30,064 INFO L256 TraceCheckUtils]: 6: Hoare triple {2886#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {2886#true} is VALID [2018-11-23 12:47:30,067 INFO L273 TraceCheckUtils]: 7: Hoare triple {2886#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,068 INFO L273 TraceCheckUtils]: 8: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,069 INFO L273 TraceCheckUtils]: 9: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,070 INFO L273 TraceCheckUtils]: 10: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,071 INFO L273 TraceCheckUtils]: 11: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,071 INFO L273 TraceCheckUtils]: 12: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,072 INFO L273 TraceCheckUtils]: 13: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,073 INFO L273 TraceCheckUtils]: 14: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,073 INFO L273 TraceCheckUtils]: 15: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,074 INFO L273 TraceCheckUtils]: 16: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,075 INFO L273 TraceCheckUtils]: 17: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,075 INFO L273 TraceCheckUtils]: 18: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,076 INFO L273 TraceCheckUtils]: 19: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:30,077 INFO L273 TraceCheckUtils]: 20: Hoare triple {2888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2889#(= |ssl3_accept_#t~mem30| 8464)} is VALID [2018-11-23 12:47:30,078 INFO L273 TraceCheckUtils]: 21: Hoare triple {2889#(= |ssl3_accept_#t~mem30| 8464)} assume 8481 == #t~mem30;havoc #t~mem30; {2887#false} is VALID [2018-11-23 12:47:30,078 INFO L273 TraceCheckUtils]: 22: Hoare triple {2887#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {2887#false} is VALID [2018-11-23 12:47:30,079 INFO L273 TraceCheckUtils]: 23: Hoare triple {2887#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,079 INFO L273 TraceCheckUtils]: 24: Hoare triple {2887#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,079 INFO L273 TraceCheckUtils]: 25: Hoare triple {2887#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {2887#false} is VALID [2018-11-23 12:47:30,080 INFO L273 TraceCheckUtils]: 26: Hoare triple {2887#false} ~skip~0 := 0; {2887#false} is VALID [2018-11-23 12:47:30,080 INFO L273 TraceCheckUtils]: 27: Hoare triple {2887#false} assume !false; {2887#false} is VALID [2018-11-23 12:47:30,080 INFO L273 TraceCheckUtils]: 28: Hoare triple {2887#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,080 INFO L273 TraceCheckUtils]: 29: Hoare triple {2887#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,081 INFO L273 TraceCheckUtils]: 30: Hoare triple {2887#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,081 INFO L273 TraceCheckUtils]: 31: Hoare triple {2887#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,081 INFO L273 TraceCheckUtils]: 32: Hoare triple {2887#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,081 INFO L273 TraceCheckUtils]: 33: Hoare triple {2887#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,081 INFO L273 TraceCheckUtils]: 34: Hoare triple {2887#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,082 INFO L273 TraceCheckUtils]: 35: Hoare triple {2887#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,082 INFO L273 TraceCheckUtils]: 36: Hoare triple {2887#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,082 INFO L273 TraceCheckUtils]: 37: Hoare triple {2887#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,082 INFO L273 TraceCheckUtils]: 38: Hoare triple {2887#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,082 INFO L273 TraceCheckUtils]: 39: Hoare triple {2887#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,083 INFO L273 TraceCheckUtils]: 40: Hoare triple {2887#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,083 INFO L273 TraceCheckUtils]: 41: Hoare triple {2887#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,083 INFO L273 TraceCheckUtils]: 42: Hoare triple {2887#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,083 INFO L273 TraceCheckUtils]: 43: Hoare triple {2887#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,084 INFO L273 TraceCheckUtils]: 44: Hoare triple {2887#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,084 INFO L273 TraceCheckUtils]: 45: Hoare triple {2887#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,084 INFO L273 TraceCheckUtils]: 46: Hoare triple {2887#false} assume 8544 == #t~mem41;havoc #t~mem41; {2887#false} is VALID [2018-11-23 12:47:30,084 INFO L273 TraceCheckUtils]: 47: Hoare triple {2887#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,085 INFO L273 TraceCheckUtils]: 48: Hoare triple {2887#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,085 INFO L273 TraceCheckUtils]: 49: Hoare triple {2887#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {2887#false} is VALID [2018-11-23 12:47:30,085 INFO L273 TraceCheckUtils]: 50: Hoare triple {2887#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {2887#false} is VALID [2018-11-23 12:47:30,085 INFO L273 TraceCheckUtils]: 51: Hoare triple {2887#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {2887#false} is VALID [2018-11-23 12:47:30,086 INFO L273 TraceCheckUtils]: 52: Hoare triple {2887#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {2887#false} is VALID [2018-11-23 12:47:30,086 INFO L273 TraceCheckUtils]: 53: Hoare triple {2887#false} assume 7 == ~blastFlag~0; {2887#false} is VALID [2018-11-23 12:47:30,086 INFO L273 TraceCheckUtils]: 54: Hoare triple {2887#false} assume !false; {2887#false} is VALID [2018-11-23 12:47:30,091 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:30,091 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:30,091 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:30,091 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:30,092 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:30,092 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:30,158 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:30,158 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:30,159 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:30,159 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:30,159 INFO L87 Difference]: Start difference. First operand 172 states and 257 transitions. Second operand 4 states. [2018-11-23 12:47:31,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:31,444 INFO L93 Difference]: Finished difference Result 333 states and 497 transitions. [2018-11-23 12:47:31,444 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:31,445 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:31,445 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:31,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:31,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:47:31,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:31,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 443 transitions. [2018-11-23 12:47:31,457 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 443 transitions. [2018-11-23 12:47:32,056 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 443 edges. 443 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:32,061 INFO L225 Difference]: With dead ends: 333 [2018-11-23 12:47:32,061 INFO L226 Difference]: Without dead ends: 186 [2018-11-23 12:47:32,062 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:32,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2018-11-23 12:47:32,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 172. [2018-11-23 12:47:32,146 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:32,146 INFO L82 GeneralOperation]: Start isEquivalent. First operand 186 states. Second operand 172 states. [2018-11-23 12:47:32,147 INFO L74 IsIncluded]: Start isIncluded. First operand 186 states. Second operand 172 states. [2018-11-23 12:47:32,147 INFO L87 Difference]: Start difference. First operand 186 states. Second operand 172 states. [2018-11-23 12:47:32,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:32,155 INFO L93 Difference]: Finished difference Result 186 states and 273 transitions. [2018-11-23 12:47:32,155 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 273 transitions. [2018-11-23 12:47:32,156 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:32,157 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:32,157 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 186 states. [2018-11-23 12:47:32,157 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 186 states. [2018-11-23 12:47:32,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:32,165 INFO L93 Difference]: Finished difference Result 186 states and 273 transitions. [2018-11-23 12:47:32,165 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 273 transitions. [2018-11-23 12:47:32,166 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:32,166 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:32,166 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:32,167 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:32,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:32,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 256 transitions. [2018-11-23 12:47:32,174 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 256 transitions. Word has length 55 [2018-11-23 12:47:32,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:32,175 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 256 transitions. [2018-11-23 12:47:32,175 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:32,175 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 256 transitions. [2018-11-23 12:47:32,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-11-23 12:47:32,176 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:32,176 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:32,176 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:32,177 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:32,177 INFO L82 PathProgramCache]: Analyzing trace with hash -480987638, now seen corresponding path program 1 times [2018-11-23 12:47:32,177 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:32,177 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:32,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:32,179 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:32,179 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:32,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:32,408 INFO L256 TraceCheckUtils]: 0: Hoare triple {3866#true} call ULTIMATE.init(); {3866#true} is VALID [2018-11-23 12:47:32,408 INFO L273 TraceCheckUtils]: 1: Hoare triple {3866#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {3866#true} is VALID [2018-11-23 12:47:32,409 INFO L273 TraceCheckUtils]: 2: Hoare triple {3866#true} assume true; {3866#true} is VALID [2018-11-23 12:47:32,409 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {3866#true} {3866#true} #633#return; {3866#true} is VALID [2018-11-23 12:47:32,409 INFO L256 TraceCheckUtils]: 4: Hoare triple {3866#true} call #t~ret138 := main(); {3866#true} is VALID [2018-11-23 12:47:32,410 INFO L273 TraceCheckUtils]: 5: Hoare triple {3866#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {3866#true} is VALID [2018-11-23 12:47:32,410 INFO L256 TraceCheckUtils]: 6: Hoare triple {3866#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {3866#true} is VALID [2018-11-23 12:47:32,413 INFO L273 TraceCheckUtils]: 7: Hoare triple {3866#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,414 INFO L273 TraceCheckUtils]: 8: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,418 INFO L273 TraceCheckUtils]: 9: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,419 INFO L273 TraceCheckUtils]: 10: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,420 INFO L273 TraceCheckUtils]: 11: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,420 INFO L273 TraceCheckUtils]: 12: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,420 INFO L273 TraceCheckUtils]: 13: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,421 INFO L273 TraceCheckUtils]: 14: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,422 INFO L273 TraceCheckUtils]: 15: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,422 INFO L273 TraceCheckUtils]: 16: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,423 INFO L273 TraceCheckUtils]: 17: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,424 INFO L273 TraceCheckUtils]: 18: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,425 INFO L273 TraceCheckUtils]: 19: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,425 INFO L273 TraceCheckUtils]: 20: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:32,426 INFO L273 TraceCheckUtils]: 21: Hoare triple {3868#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3869#(= |ssl3_accept_#t~mem31| 8464)} is VALID [2018-11-23 12:47:32,427 INFO L273 TraceCheckUtils]: 22: Hoare triple {3869#(= |ssl3_accept_#t~mem31| 8464)} assume 8482 == #t~mem31;havoc #t~mem31; {3867#false} is VALID [2018-11-23 12:47:32,428 INFO L273 TraceCheckUtils]: 23: Hoare triple {3867#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,428 INFO L273 TraceCheckUtils]: 24: Hoare triple {3867#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,428 INFO L273 TraceCheckUtils]: 25: Hoare triple {3867#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {3867#false} is VALID [2018-11-23 12:47:32,429 INFO L273 TraceCheckUtils]: 26: Hoare triple {3867#false} ~skip~0 := 0; {3867#false} is VALID [2018-11-23 12:47:32,429 INFO L273 TraceCheckUtils]: 27: Hoare triple {3867#false} assume !false; {3867#false} is VALID [2018-11-23 12:47:32,430 INFO L273 TraceCheckUtils]: 28: Hoare triple {3867#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,430 INFO L273 TraceCheckUtils]: 29: Hoare triple {3867#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,431 INFO L273 TraceCheckUtils]: 30: Hoare triple {3867#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,431 INFO L273 TraceCheckUtils]: 31: Hoare triple {3867#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,431 INFO L273 TraceCheckUtils]: 32: Hoare triple {3867#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,432 INFO L273 TraceCheckUtils]: 33: Hoare triple {3867#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,432 INFO L273 TraceCheckUtils]: 34: Hoare triple {3867#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,433 INFO L273 TraceCheckUtils]: 35: Hoare triple {3867#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,433 INFO L273 TraceCheckUtils]: 36: Hoare triple {3867#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,433 INFO L273 TraceCheckUtils]: 37: Hoare triple {3867#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,434 INFO L273 TraceCheckUtils]: 38: Hoare triple {3867#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,434 INFO L273 TraceCheckUtils]: 39: Hoare triple {3867#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,434 INFO L273 TraceCheckUtils]: 40: Hoare triple {3867#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,434 INFO L273 TraceCheckUtils]: 41: Hoare triple {3867#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,434 INFO L273 TraceCheckUtils]: 42: Hoare triple {3867#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,435 INFO L273 TraceCheckUtils]: 43: Hoare triple {3867#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,435 INFO L273 TraceCheckUtils]: 44: Hoare triple {3867#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,435 INFO L273 TraceCheckUtils]: 45: Hoare triple {3867#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,435 INFO L273 TraceCheckUtils]: 46: Hoare triple {3867#false} assume 8544 == #t~mem41;havoc #t~mem41; {3867#false} is VALID [2018-11-23 12:47:32,435 INFO L273 TraceCheckUtils]: 47: Hoare triple {3867#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,436 INFO L273 TraceCheckUtils]: 48: Hoare triple {3867#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,436 INFO L273 TraceCheckUtils]: 49: Hoare triple {3867#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {3867#false} is VALID [2018-11-23 12:47:32,436 INFO L273 TraceCheckUtils]: 50: Hoare triple {3867#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {3867#false} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 51: Hoare triple {3867#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {3867#false} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 52: Hoare triple {3867#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {3867#false} is VALID [2018-11-23 12:47:32,437 INFO L273 TraceCheckUtils]: 53: Hoare triple {3867#false} assume 7 == ~blastFlag~0; {3867#false} is VALID [2018-11-23 12:47:32,438 INFO L273 TraceCheckUtils]: 54: Hoare triple {3867#false} assume !false; {3867#false} is VALID [2018-11-23 12:47:32,444 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:32,445 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:32,445 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:32,445 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:32,446 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:32,446 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:32,529 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:32,529 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:32,530 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:32,530 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:32,530 INFO L87 Difference]: Start difference. First operand 172 states and 256 transitions. Second operand 4 states. [2018-11-23 12:47:34,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:34,002 INFO L93 Difference]: Finished difference Result 332 states and 495 transitions. [2018-11-23 12:47:34,003 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:34,003 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2018-11-23 12:47:34,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:34,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:34,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 441 transitions. [2018-11-23 12:47:34,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:34,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 441 transitions. [2018-11-23 12:47:34,013 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 441 transitions. [2018-11-23 12:47:34,534 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 441 edges. 441 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:34,539 INFO L225 Difference]: With dead ends: 332 [2018-11-23 12:47:34,539 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 12:47:34,540 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:34,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 12:47:34,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 12:47:34,619 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:34,619 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:34,619 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:34,620 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:34,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:34,628 INFO L93 Difference]: Finished difference Result 185 states and 271 transitions. [2018-11-23 12:47:34,628 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 271 transitions. [2018-11-23 12:47:34,628 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:34,629 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:34,629 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:34,629 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:34,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:34,634 INFO L93 Difference]: Finished difference Result 185 states and 271 transitions. [2018-11-23 12:47:34,634 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 271 transitions. [2018-11-23 12:47:34,635 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:34,635 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:34,635 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:34,635 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:34,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:34,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 255 transitions. [2018-11-23 12:47:34,640 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 255 transitions. Word has length 55 [2018-11-23 12:47:34,640 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:34,640 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 255 transitions. [2018-11-23 12:47:34,640 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:34,641 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 255 transitions. [2018-11-23 12:47:34,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2018-11-23 12:47:34,641 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:34,642 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:34,642 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:34,642 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:34,642 INFO L82 PathProgramCache]: Analyzing trace with hash -2014271313, now seen corresponding path program 1 times [2018-11-23 12:47:34,642 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:34,643 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:34,644 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:34,644 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:34,644 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:34,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:35,272 INFO L256 TraceCheckUtils]: 0: Hoare triple {4842#true} call ULTIMATE.init(); {4842#true} is VALID [2018-11-23 12:47:35,272 INFO L273 TraceCheckUtils]: 1: Hoare triple {4842#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {4842#true} is VALID [2018-11-23 12:47:35,272 INFO L273 TraceCheckUtils]: 2: Hoare triple {4842#true} assume true; {4842#true} is VALID [2018-11-23 12:47:35,273 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {4842#true} {4842#true} #633#return; {4842#true} is VALID [2018-11-23 12:47:35,273 INFO L256 TraceCheckUtils]: 4: Hoare triple {4842#true} call #t~ret138 := main(); {4842#true} is VALID [2018-11-23 12:47:35,273 INFO L273 TraceCheckUtils]: 5: Hoare triple {4842#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {4842#true} is VALID [2018-11-23 12:47:35,273 INFO L256 TraceCheckUtils]: 6: Hoare triple {4842#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {4842#true} is VALID [2018-11-23 12:47:35,275 INFO L273 TraceCheckUtils]: 7: Hoare triple {4842#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,276 INFO L273 TraceCheckUtils]: 8: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,277 INFO L273 TraceCheckUtils]: 9: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,278 INFO L273 TraceCheckUtils]: 10: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,279 INFO L273 TraceCheckUtils]: 11: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,279 INFO L273 TraceCheckUtils]: 12: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,280 INFO L273 TraceCheckUtils]: 13: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,280 INFO L273 TraceCheckUtils]: 14: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:35,288 INFO L273 TraceCheckUtils]: 15: Hoare triple {4844#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4845#(= |ssl3_accept_#t~mem25| 8464)} is VALID [2018-11-23 12:47:35,289 INFO L273 TraceCheckUtils]: 16: Hoare triple {4845#(= |ssl3_accept_#t~mem25| 8464)} assume 16384 == #t~mem25;havoc #t~mem25; {4843#false} is VALID [2018-11-23 12:47:35,289 INFO L273 TraceCheckUtils]: 17: Hoare triple {4843#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,289 INFO L273 TraceCheckUtils]: 18: Hoare triple {4843#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {4843#false} is VALID [2018-11-23 12:47:35,289 INFO L273 TraceCheckUtils]: 19: Hoare triple {4843#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,289 INFO L273 TraceCheckUtils]: 20: Hoare triple {4843#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,290 INFO L273 TraceCheckUtils]: 21: Hoare triple {4843#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {4843#false} is VALID [2018-11-23 12:47:35,290 INFO L273 TraceCheckUtils]: 22: Hoare triple {4843#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,290 INFO L273 TraceCheckUtils]: 23: Hoare triple {4843#false} assume 12292 != #t~mem62;havoc #t~mem62; {4843#false} is VALID [2018-11-23 12:47:35,290 INFO L273 TraceCheckUtils]: 24: Hoare triple {4843#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {4843#false} is VALID [2018-11-23 12:47:35,290 INFO L273 TraceCheckUtils]: 25: Hoare triple {4843#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,291 INFO L273 TraceCheckUtils]: 26: Hoare triple {4843#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {4843#false} is VALID [2018-11-23 12:47:35,291 INFO L273 TraceCheckUtils]: 27: Hoare triple {4843#false} ~skip~0 := 0; {4843#false} is VALID [2018-11-23 12:47:35,291 INFO L273 TraceCheckUtils]: 28: Hoare triple {4843#false} assume !false; {4843#false} is VALID [2018-11-23 12:47:35,291 INFO L273 TraceCheckUtils]: 29: Hoare triple {4843#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,291 INFO L273 TraceCheckUtils]: 30: Hoare triple {4843#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,291 INFO L273 TraceCheckUtils]: 31: Hoare triple {4843#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,292 INFO L273 TraceCheckUtils]: 32: Hoare triple {4843#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,292 INFO L273 TraceCheckUtils]: 33: Hoare triple {4843#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,292 INFO L273 TraceCheckUtils]: 34: Hoare triple {4843#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,292 INFO L273 TraceCheckUtils]: 35: Hoare triple {4843#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,292 INFO L273 TraceCheckUtils]: 36: Hoare triple {4843#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,292 INFO L273 TraceCheckUtils]: 37: Hoare triple {4843#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 38: Hoare triple {4843#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 39: Hoare triple {4843#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 40: Hoare triple {4843#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 41: Hoare triple {4843#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 42: Hoare triple {4843#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 43: Hoare triple {4843#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,293 INFO L273 TraceCheckUtils]: 44: Hoare triple {4843#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,294 INFO L273 TraceCheckUtils]: 45: Hoare triple {4843#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,295 INFO L273 TraceCheckUtils]: 46: Hoare triple {4843#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,295 INFO L273 TraceCheckUtils]: 47: Hoare triple {4843#false} assume 8544 == #t~mem41;havoc #t~mem41; {4843#false} is VALID [2018-11-23 12:47:35,295 INFO L273 TraceCheckUtils]: 48: Hoare triple {4843#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,295 INFO L273 TraceCheckUtils]: 49: Hoare triple {4843#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,296 INFO L273 TraceCheckUtils]: 50: Hoare triple {4843#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {4843#false} is VALID [2018-11-23 12:47:35,296 INFO L273 TraceCheckUtils]: 51: Hoare triple {4843#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {4843#false} is VALID [2018-11-23 12:47:35,296 INFO L273 TraceCheckUtils]: 52: Hoare triple {4843#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {4843#false} is VALID [2018-11-23 12:47:35,296 INFO L273 TraceCheckUtils]: 53: Hoare triple {4843#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {4843#false} is VALID [2018-11-23 12:47:35,296 INFO L273 TraceCheckUtils]: 54: Hoare triple {4843#false} assume 7 == ~blastFlag~0; {4843#false} is VALID [2018-11-23 12:47:35,297 INFO L273 TraceCheckUtils]: 55: Hoare triple {4843#false} assume !false; {4843#false} is VALID [2018-11-23 12:47:35,299 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:35,299 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:35,300 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:35,300 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-23 12:47:35,300 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:35,300 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:35,363 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:35,363 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:35,363 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:35,363 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:35,364 INFO L87 Difference]: Start difference. First operand 172 states and 255 transitions. Second operand 4 states. [2018-11-23 12:47:36,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:36,875 INFO L93 Difference]: Finished difference Result 332 states and 494 transitions. [2018-11-23 12:47:36,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:36,876 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 56 [2018-11-23 12:47:36,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:36,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:36,879 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 440 transitions. [2018-11-23 12:47:36,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:36,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 440 transitions. [2018-11-23 12:47:36,884 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 440 transitions. [2018-11-23 12:47:38,020 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 440 edges. 440 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:38,025 INFO L225 Difference]: With dead ends: 332 [2018-11-23 12:47:38,026 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 12:47:38,026 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:38,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 12:47:38,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 12:47:38,082 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:38,082 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:38,082 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:38,082 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:38,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,087 INFO L93 Difference]: Finished difference Result 185 states and 270 transitions. [2018-11-23 12:47:38,087 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 270 transitions. [2018-11-23 12:47:38,088 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:38,088 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:38,088 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:38,088 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:38,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:38,093 INFO L93 Difference]: Finished difference Result 185 states and 270 transitions. [2018-11-23 12:47:38,094 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 270 transitions. [2018-11-23 12:47:38,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:38,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:38,095 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:38,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:38,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:38,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 254 transitions. [2018-11-23 12:47:38,100 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 254 transitions. Word has length 56 [2018-11-23 12:47:38,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:38,100 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 254 transitions. [2018-11-23 12:47:38,100 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:38,100 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 254 transitions. [2018-11-23 12:47:38,101 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 12:47:38,101 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:38,101 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:38,102 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:38,102 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:38,102 INFO L82 PathProgramCache]: Analyzing trace with hash -515871290, now seen corresponding path program 1 times [2018-11-23 12:47:38,102 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:38,102 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:38,104 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:38,104 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:38,104 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:38,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:38,394 WARN L180 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 18 DAG size of output: 15 [2018-11-23 12:47:38,785 INFO L256 TraceCheckUtils]: 0: Hoare triple {5818#true} call ULTIMATE.init(); {5818#true} is VALID [2018-11-23 12:47:38,785 INFO L273 TraceCheckUtils]: 1: Hoare triple {5818#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {5818#true} is VALID [2018-11-23 12:47:38,785 INFO L273 TraceCheckUtils]: 2: Hoare triple {5818#true} assume true; {5818#true} is VALID [2018-11-23 12:47:38,786 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {5818#true} {5818#true} #633#return; {5818#true} is VALID [2018-11-23 12:47:38,786 INFO L256 TraceCheckUtils]: 4: Hoare triple {5818#true} call #t~ret138 := main(); {5818#true} is VALID [2018-11-23 12:47:38,786 INFO L273 TraceCheckUtils]: 5: Hoare triple {5818#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {5818#true} is VALID [2018-11-23 12:47:38,787 INFO L256 TraceCheckUtils]: 6: Hoare triple {5818#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {5818#true} is VALID [2018-11-23 12:47:38,789 INFO L273 TraceCheckUtils]: 7: Hoare triple {5818#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,790 INFO L273 TraceCheckUtils]: 8: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,792 INFO L273 TraceCheckUtils]: 9: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,792 INFO L273 TraceCheckUtils]: 10: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,793 INFO L273 TraceCheckUtils]: 11: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,794 INFO L273 TraceCheckUtils]: 12: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,794 INFO L273 TraceCheckUtils]: 13: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,795 INFO L273 TraceCheckUtils]: 14: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,795 INFO L273 TraceCheckUtils]: 15: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:38,797 INFO L273 TraceCheckUtils]: 16: Hoare triple {5820#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5821#(= |ssl3_accept_#t~mem26| 8464)} is VALID [2018-11-23 12:47:38,797 INFO L273 TraceCheckUtils]: 17: Hoare triple {5821#(= |ssl3_accept_#t~mem26| 8464)} assume 8192 == #t~mem26;havoc #t~mem26; {5819#false} is VALID [2018-11-23 12:47:38,798 INFO L273 TraceCheckUtils]: 18: Hoare triple {5819#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,798 INFO L273 TraceCheckUtils]: 19: Hoare triple {5819#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {5819#false} is VALID [2018-11-23 12:47:38,798 INFO L273 TraceCheckUtils]: 20: Hoare triple {5819#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,799 INFO L273 TraceCheckUtils]: 21: Hoare triple {5819#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,799 INFO L273 TraceCheckUtils]: 22: Hoare triple {5819#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {5819#false} is VALID [2018-11-23 12:47:38,799 INFO L273 TraceCheckUtils]: 23: Hoare triple {5819#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,799 INFO L273 TraceCheckUtils]: 24: Hoare triple {5819#false} assume 12292 != #t~mem62;havoc #t~mem62; {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 25: Hoare triple {5819#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 26: Hoare triple {5819#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 27: Hoare triple {5819#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 28: Hoare triple {5819#false} ~skip~0 := 0; {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 29: Hoare triple {5819#false} assume !false; {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 30: Hoare triple {5819#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,800 INFO L273 TraceCheckUtils]: 31: Hoare triple {5819#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,801 INFO L273 TraceCheckUtils]: 32: Hoare triple {5819#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,801 INFO L273 TraceCheckUtils]: 33: Hoare triple {5819#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,801 INFO L273 TraceCheckUtils]: 34: Hoare triple {5819#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,801 INFO L273 TraceCheckUtils]: 35: Hoare triple {5819#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,802 INFO L273 TraceCheckUtils]: 36: Hoare triple {5819#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,802 INFO L273 TraceCheckUtils]: 37: Hoare triple {5819#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,802 INFO L273 TraceCheckUtils]: 38: Hoare triple {5819#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,802 INFO L273 TraceCheckUtils]: 39: Hoare triple {5819#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,802 INFO L273 TraceCheckUtils]: 40: Hoare triple {5819#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,803 INFO L273 TraceCheckUtils]: 41: Hoare triple {5819#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,803 INFO L273 TraceCheckUtils]: 42: Hoare triple {5819#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,803 INFO L273 TraceCheckUtils]: 43: Hoare triple {5819#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,803 INFO L273 TraceCheckUtils]: 44: Hoare triple {5819#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,803 INFO L273 TraceCheckUtils]: 45: Hoare triple {5819#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,804 INFO L273 TraceCheckUtils]: 46: Hoare triple {5819#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,804 INFO L273 TraceCheckUtils]: 47: Hoare triple {5819#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,804 INFO L273 TraceCheckUtils]: 48: Hoare triple {5819#false} assume 8544 == #t~mem41;havoc #t~mem41; {5819#false} is VALID [2018-11-23 12:47:38,804 INFO L273 TraceCheckUtils]: 49: Hoare triple {5819#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,804 INFO L273 TraceCheckUtils]: 50: Hoare triple {5819#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,805 INFO L273 TraceCheckUtils]: 51: Hoare triple {5819#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {5819#false} is VALID [2018-11-23 12:47:38,805 INFO L273 TraceCheckUtils]: 52: Hoare triple {5819#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {5819#false} is VALID [2018-11-23 12:47:38,805 INFO L273 TraceCheckUtils]: 53: Hoare triple {5819#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {5819#false} is VALID [2018-11-23 12:47:38,805 INFO L273 TraceCheckUtils]: 54: Hoare triple {5819#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {5819#false} is VALID [2018-11-23 12:47:38,806 INFO L273 TraceCheckUtils]: 55: Hoare triple {5819#false} assume 7 == ~blastFlag~0; {5819#false} is VALID [2018-11-23 12:47:38,806 INFO L273 TraceCheckUtils]: 56: Hoare triple {5819#false} assume !false; {5819#false} is VALID [2018-11-23 12:47:38,811 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:38,811 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:38,811 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:38,812 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-23 12:47:38,812 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:38,812 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:38,898 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 57 edges. 57 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:38,898 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:38,899 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:38,899 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:38,899 INFO L87 Difference]: Start difference. First operand 172 states and 254 transitions. Second operand 4 states. [2018-11-23 12:47:40,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:40,648 INFO L93 Difference]: Finished difference Result 332 states and 493 transitions. [2018-11-23 12:47:40,648 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:40,649 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 57 [2018-11-23 12:47:40,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:40,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:40,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 439 transitions. [2018-11-23 12:47:40,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:40,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 439 transitions. [2018-11-23 12:47:40,658 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 439 transitions. [2018-11-23 12:47:41,780 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:41,784 INFO L225 Difference]: With dead ends: 332 [2018-11-23 12:47:41,784 INFO L226 Difference]: Without dead ends: 185 [2018-11-23 12:47:41,786 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:41,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2018-11-23 12:47:41,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 172. [2018-11-23 12:47:41,868 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:41,868 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:41,868 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:41,868 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 172 states. [2018-11-23 12:47:41,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:41,873 INFO L93 Difference]: Finished difference Result 185 states and 269 transitions. [2018-11-23 12:47:41,873 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 269 transitions. [2018-11-23 12:47:41,874 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:41,874 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:41,874 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:41,875 INFO L87 Difference]: Start difference. First operand 172 states. Second operand 185 states. [2018-11-23 12:47:41,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:41,879 INFO L93 Difference]: Finished difference Result 185 states and 269 transitions. [2018-11-23 12:47:41,880 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 269 transitions. [2018-11-23 12:47:41,880 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:41,880 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:41,881 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:41,881 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:41,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 172 states. [2018-11-23 12:47:41,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 253 transitions. [2018-11-23 12:47:41,886 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 253 transitions. Word has length 57 [2018-11-23 12:47:41,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:41,887 INFO L480 AbstractCegarLoop]: Abstraction has 172 states and 253 transitions. [2018-11-23 12:47:41,887 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:41,887 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 253 transitions. [2018-11-23 12:47:41,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 12:47:41,888 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:41,888 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:41,888 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:41,889 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:41,889 INFO L82 PathProgramCache]: Analyzing trace with hash -623975095, now seen corresponding path program 1 times [2018-11-23 12:47:41,889 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:41,889 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:41,890 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:41,890 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:41,890 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:41,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:42,541 INFO L256 TraceCheckUtils]: 0: Hoare triple {6794#true} call ULTIMATE.init(); {6794#true} is VALID [2018-11-23 12:47:42,541 INFO L273 TraceCheckUtils]: 1: Hoare triple {6794#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,542 INFO L273 TraceCheckUtils]: 2: Hoare triple {6794#true} assume true; {6794#true} is VALID [2018-11-23 12:47:42,542 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {6794#true} {6794#true} #633#return; {6794#true} is VALID [2018-11-23 12:47:42,542 INFO L256 TraceCheckUtils]: 4: Hoare triple {6794#true} call #t~ret138 := main(); {6794#true} is VALID [2018-11-23 12:47:42,542 INFO L273 TraceCheckUtils]: 5: Hoare triple {6794#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,542 INFO L256 TraceCheckUtils]: 6: Hoare triple {6794#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {6794#true} is VALID [2018-11-23 12:47:42,543 INFO L273 TraceCheckUtils]: 7: Hoare triple {6794#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,543 INFO L273 TraceCheckUtils]: 8: Hoare triple {6794#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {6794#true} is VALID [2018-11-23 12:47:42,543 INFO L273 TraceCheckUtils]: 9: Hoare triple {6794#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {6794#true} is VALID [2018-11-23 12:47:42,543 INFO L273 TraceCheckUtils]: 10: Hoare triple {6794#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {6794#true} is VALID [2018-11-23 12:47:42,543 INFO L273 TraceCheckUtils]: 11: Hoare triple {6794#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,544 INFO L273 TraceCheckUtils]: 12: Hoare triple {6794#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {6794#true} is VALID [2018-11-23 12:47:42,544 INFO L273 TraceCheckUtils]: 13: Hoare triple {6794#true} assume !false; {6794#true} is VALID [2018-11-23 12:47:42,544 INFO L273 TraceCheckUtils]: 14: Hoare triple {6794#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,544 INFO L273 TraceCheckUtils]: 15: Hoare triple {6794#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,544 INFO L273 TraceCheckUtils]: 16: Hoare triple {6794#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,545 INFO L273 TraceCheckUtils]: 17: Hoare triple {6794#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,545 INFO L273 TraceCheckUtils]: 18: Hoare triple {6794#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,545 INFO L273 TraceCheckUtils]: 19: Hoare triple {6794#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,545 INFO L273 TraceCheckUtils]: 20: Hoare triple {6794#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,546 INFO L273 TraceCheckUtils]: 21: Hoare triple {6794#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,546 INFO L273 TraceCheckUtils]: 22: Hoare triple {6794#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6794#true} is VALID [2018-11-23 12:47:42,546 INFO L273 TraceCheckUtils]: 23: Hoare triple {6794#true} assume 8464 == #t~mem32;havoc #t~mem32; {6794#true} is VALID [2018-11-23 12:47:42,546 INFO L273 TraceCheckUtils]: 24: Hoare triple {6794#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {6794#true} is VALID [2018-11-23 12:47:42,547 INFO L273 TraceCheckUtils]: 25: Hoare triple {6794#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {6794#true} is VALID [2018-11-23 12:47:42,557 INFO L273 TraceCheckUtils]: 26: Hoare triple {6794#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,572 INFO L273 TraceCheckUtils]: 27: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,581 INFO L273 TraceCheckUtils]: 28: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,595 INFO L273 TraceCheckUtils]: 29: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,604 INFO L273 TraceCheckUtils]: 30: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,619 INFO L273 TraceCheckUtils]: 31: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,628 INFO L273 TraceCheckUtils]: 32: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,646 INFO L273 TraceCheckUtils]: 33: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,655 INFO L273 TraceCheckUtils]: 34: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,667 INFO L273 TraceCheckUtils]: 35: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,680 INFO L273 TraceCheckUtils]: 36: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,693 INFO L273 TraceCheckUtils]: 37: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,710 INFO L273 TraceCheckUtils]: 38: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,719 INFO L273 TraceCheckUtils]: 39: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,732 INFO L273 TraceCheckUtils]: 40: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,744 INFO L273 TraceCheckUtils]: 41: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:47:42,757 INFO L273 TraceCheckUtils]: 42: Hoare triple {6796#(= 8496 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {6797#(= 8496 |ssl3_accept_#t~mem35|)} is VALID [2018-11-23 12:47:42,777 INFO L273 TraceCheckUtils]: 43: Hoare triple {6797#(= 8496 |ssl3_accept_#t~mem35|)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,777 INFO L273 TraceCheckUtils]: 44: Hoare triple {6795#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,778 INFO L273 TraceCheckUtils]: 45: Hoare triple {6795#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,778 INFO L273 TraceCheckUtils]: 46: Hoare triple {6795#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,778 INFO L273 TraceCheckUtils]: 47: Hoare triple {6795#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,778 INFO L273 TraceCheckUtils]: 48: Hoare triple {6795#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,781 INFO L273 TraceCheckUtils]: 49: Hoare triple {6795#false} assume 8544 == #t~mem41;havoc #t~mem41; {6795#false} is VALID [2018-11-23 12:47:42,781 INFO L273 TraceCheckUtils]: 50: Hoare triple {6795#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,781 INFO L273 TraceCheckUtils]: 51: Hoare triple {6795#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,781 INFO L273 TraceCheckUtils]: 52: Hoare triple {6795#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {6795#false} is VALID [2018-11-23 12:47:42,782 INFO L273 TraceCheckUtils]: 53: Hoare triple {6795#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {6795#false} is VALID [2018-11-23 12:47:42,782 INFO L273 TraceCheckUtils]: 54: Hoare triple {6795#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {6795#false} is VALID [2018-11-23 12:47:42,782 INFO L273 TraceCheckUtils]: 55: Hoare triple {6795#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {6795#false} is VALID [2018-11-23 12:47:42,782 INFO L273 TraceCheckUtils]: 56: Hoare triple {6795#false} assume 7 == ~blastFlag~0; {6795#false} is VALID [2018-11-23 12:47:42,782 INFO L273 TraceCheckUtils]: 57: Hoare triple {6795#false} assume !false; {6795#false} is VALID [2018-11-23 12:47:42,787 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:42,788 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:42,788 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:42,788 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:42,791 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:42,792 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:43,033 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:43,034 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:43,034 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:43,034 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:43,035 INFO L87 Difference]: Start difference. First operand 172 states and 253 transitions. Second operand 4 states. [2018-11-23 12:47:44,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:44,317 INFO L93 Difference]: Finished difference Result 361 states and 539 transitions. [2018-11-23 12:47:44,317 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:44,317 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:44,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:44,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:44,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 472 transitions. [2018-11-23 12:47:44,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:44,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 472 transitions. [2018-11-23 12:47:44,328 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 472 transitions. [2018-11-23 12:47:45,920 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 472 edges. 472 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:45,926 INFO L225 Difference]: With dead ends: 361 [2018-11-23 12:47:45,926 INFO L226 Difference]: Without dead ends: 214 [2018-11-23 12:47:45,926 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:45,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2018-11-23 12:47:45,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 194. [2018-11-23 12:47:45,984 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:45,984 INFO L82 GeneralOperation]: Start isEquivalent. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:45,984 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:45,985 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:45,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:45,991 INFO L93 Difference]: Finished difference Result 214 states and 315 transitions. [2018-11-23 12:47:45,991 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 315 transitions. [2018-11-23 12:47:45,992 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:45,992 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:45,992 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:45,992 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:45,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:45,998 INFO L93 Difference]: Finished difference Result 214 states and 315 transitions. [2018-11-23 12:47:45,998 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 315 transitions. [2018-11-23 12:47:45,999 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:45,999 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:45,999 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:45,999 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:45,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:46,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 290 transitions. [2018-11-23 12:47:46,004 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 290 transitions. Word has length 58 [2018-11-23 12:47:46,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:46,004 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 290 transitions. [2018-11-23 12:47:46,004 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:46,005 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 290 transitions. [2018-11-23 12:47:46,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-11-23 12:47:46,005 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:46,006 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:46,006 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:46,006 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:46,006 INFO L82 PathProgramCache]: Analyzing trace with hash 1702821866, now seen corresponding path program 1 times [2018-11-23 12:47:46,006 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:46,006 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:46,008 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:46,008 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:46,008 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:46,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:46,257 INFO L256 TraceCheckUtils]: 0: Hoare triple {7886#true} call ULTIMATE.init(); {7886#true} is VALID [2018-11-23 12:47:46,257 INFO L273 TraceCheckUtils]: 1: Hoare triple {7886#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {7886#true} is VALID [2018-11-23 12:47:46,258 INFO L273 TraceCheckUtils]: 2: Hoare triple {7886#true} assume true; {7886#true} is VALID [2018-11-23 12:47:46,258 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {7886#true} {7886#true} #633#return; {7886#true} is VALID [2018-11-23 12:47:46,258 INFO L256 TraceCheckUtils]: 4: Hoare triple {7886#true} call #t~ret138 := main(); {7886#true} is VALID [2018-11-23 12:47:46,259 INFO L273 TraceCheckUtils]: 5: Hoare triple {7886#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {7886#true} is VALID [2018-11-23 12:47:46,259 INFO L256 TraceCheckUtils]: 6: Hoare triple {7886#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {7886#true} is VALID [2018-11-23 12:47:46,262 INFO L273 TraceCheckUtils]: 7: Hoare triple {7886#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,262 INFO L273 TraceCheckUtils]: 8: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,263 INFO L273 TraceCheckUtils]: 9: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,264 INFO L273 TraceCheckUtils]: 10: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,264 INFO L273 TraceCheckUtils]: 11: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,265 INFO L273 TraceCheckUtils]: 12: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,265 INFO L273 TraceCheckUtils]: 13: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,266 INFO L273 TraceCheckUtils]: 14: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,266 INFO L273 TraceCheckUtils]: 15: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,267 INFO L273 TraceCheckUtils]: 16: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:46,268 INFO L273 TraceCheckUtils]: 17: Hoare triple {7888#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7889#(= |ssl3_accept_#t~mem27| 8464)} is VALID [2018-11-23 12:47:46,269 INFO L273 TraceCheckUtils]: 18: Hoare triple {7889#(= |ssl3_accept_#t~mem27| 8464)} assume 24576 == #t~mem27;havoc #t~mem27; {7887#false} is VALID [2018-11-23 12:47:46,269 INFO L273 TraceCheckUtils]: 19: Hoare triple {7887#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,269 INFO L273 TraceCheckUtils]: 20: Hoare triple {7887#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {7887#false} is VALID [2018-11-23 12:47:46,270 INFO L273 TraceCheckUtils]: 21: Hoare triple {7887#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,270 INFO L273 TraceCheckUtils]: 22: Hoare triple {7887#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,270 INFO L273 TraceCheckUtils]: 23: Hoare triple {7887#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {7887#false} is VALID [2018-11-23 12:47:46,270 INFO L273 TraceCheckUtils]: 24: Hoare triple {7887#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,270 INFO L273 TraceCheckUtils]: 25: Hoare triple {7887#false} assume 12292 != #t~mem62;havoc #t~mem62; {7887#false} is VALID [2018-11-23 12:47:46,271 INFO L273 TraceCheckUtils]: 26: Hoare triple {7887#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {7887#false} is VALID [2018-11-23 12:47:46,271 INFO L273 TraceCheckUtils]: 27: Hoare triple {7887#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,271 INFO L273 TraceCheckUtils]: 28: Hoare triple {7887#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {7887#false} is VALID [2018-11-23 12:47:46,271 INFO L273 TraceCheckUtils]: 29: Hoare triple {7887#false} ~skip~0 := 0; {7887#false} is VALID [2018-11-23 12:47:46,272 INFO L273 TraceCheckUtils]: 30: Hoare triple {7887#false} assume !false; {7887#false} is VALID [2018-11-23 12:47:46,272 INFO L273 TraceCheckUtils]: 31: Hoare triple {7887#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,272 INFO L273 TraceCheckUtils]: 32: Hoare triple {7887#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,273 INFO L273 TraceCheckUtils]: 33: Hoare triple {7887#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,273 INFO L273 TraceCheckUtils]: 34: Hoare triple {7887#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,273 INFO L273 TraceCheckUtils]: 35: Hoare triple {7887#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,273 INFO L273 TraceCheckUtils]: 36: Hoare triple {7887#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,274 INFO L273 TraceCheckUtils]: 37: Hoare triple {7887#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,274 INFO L273 TraceCheckUtils]: 38: Hoare triple {7887#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,274 INFO L273 TraceCheckUtils]: 39: Hoare triple {7887#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,274 INFO L273 TraceCheckUtils]: 40: Hoare triple {7887#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,274 INFO L273 TraceCheckUtils]: 41: Hoare triple {7887#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,275 INFO L273 TraceCheckUtils]: 42: Hoare triple {7887#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,275 INFO L273 TraceCheckUtils]: 43: Hoare triple {7887#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,275 INFO L273 TraceCheckUtils]: 44: Hoare triple {7887#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,275 INFO L273 TraceCheckUtils]: 45: Hoare triple {7887#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,276 INFO L273 TraceCheckUtils]: 46: Hoare triple {7887#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,276 INFO L273 TraceCheckUtils]: 47: Hoare triple {7887#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,276 INFO L273 TraceCheckUtils]: 48: Hoare triple {7887#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,276 INFO L273 TraceCheckUtils]: 49: Hoare triple {7887#false} assume 8544 == #t~mem41;havoc #t~mem41; {7887#false} is VALID [2018-11-23 12:47:46,276 INFO L273 TraceCheckUtils]: 50: Hoare triple {7887#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,277 INFO L273 TraceCheckUtils]: 51: Hoare triple {7887#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,277 INFO L273 TraceCheckUtils]: 52: Hoare triple {7887#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {7887#false} is VALID [2018-11-23 12:47:46,277 INFO L273 TraceCheckUtils]: 53: Hoare triple {7887#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {7887#false} is VALID [2018-11-23 12:47:46,277 INFO L273 TraceCheckUtils]: 54: Hoare triple {7887#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {7887#false} is VALID [2018-11-23 12:47:46,277 INFO L273 TraceCheckUtils]: 55: Hoare triple {7887#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {7887#false} is VALID [2018-11-23 12:47:46,278 INFO L273 TraceCheckUtils]: 56: Hoare triple {7887#false} assume 7 == ~blastFlag~0; {7887#false} is VALID [2018-11-23 12:47:46,278 INFO L273 TraceCheckUtils]: 57: Hoare triple {7887#false} assume !false; {7887#false} is VALID [2018-11-23 12:47:46,283 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:46,283 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:46,283 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:46,283 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:46,284 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:46,284 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:46,372 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:46,372 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:46,372 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:46,372 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:46,373 INFO L87 Difference]: Start difference. First operand 194 states and 290 transitions. Second operand 4 states. [2018-11-23 12:47:47,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:47,791 INFO L93 Difference]: Finished difference Result 376 states and 566 transitions. [2018-11-23 12:47:47,791 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:47,791 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 58 [2018-11-23 12:47:47,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:47,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:47,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 438 transitions. [2018-11-23 12:47:47,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:47,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 438 transitions. [2018-11-23 12:47:47,797 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 438 transitions. [2018-11-23 12:47:48,232 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 438 edges. 438 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:48,237 INFO L225 Difference]: With dead ends: 376 [2018-11-23 12:47:48,237 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 12:47:48,238 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:48,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 12:47:48,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 194. [2018-11-23 12:47:48,390 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:48,390 INFO L82 GeneralOperation]: Start isEquivalent. First operand 207 states. Second operand 194 states. [2018-11-23 12:47:48,391 INFO L74 IsIncluded]: Start isIncluded. First operand 207 states. Second operand 194 states. [2018-11-23 12:47:48,391 INFO L87 Difference]: Start difference. First operand 207 states. Second operand 194 states. [2018-11-23 12:47:48,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:48,396 INFO L93 Difference]: Finished difference Result 207 states and 305 transitions. [2018-11-23 12:47:48,396 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 305 transitions. [2018-11-23 12:47:48,396 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:48,397 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:48,397 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 207 states. [2018-11-23 12:47:48,397 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 207 states. [2018-11-23 12:47:48,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:48,402 INFO L93 Difference]: Finished difference Result 207 states and 305 transitions. [2018-11-23 12:47:48,402 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 305 transitions. [2018-11-23 12:47:48,403 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:48,403 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:48,403 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:48,403 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:48,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:48,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 289 transitions. [2018-11-23 12:47:48,408 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 289 transitions. Word has length 58 [2018-11-23 12:47:48,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:48,408 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 289 transitions. [2018-11-23 12:47:48,408 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:48,408 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 289 transitions. [2018-11-23 12:47:48,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2018-11-23 12:47:48,409 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:48,409 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:48,410 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:48,410 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:48,410 INFO L82 PathProgramCache]: Analyzing trace with hash 480798369, now seen corresponding path program 1 times [2018-11-23 12:47:48,410 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:48,410 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:48,411 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:48,412 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:48,412 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:48,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:48,588 INFO L256 TraceCheckUtils]: 0: Hoare triple {8978#true} call ULTIMATE.init(); {8978#true} is VALID [2018-11-23 12:47:48,588 INFO L273 TraceCheckUtils]: 1: Hoare triple {8978#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {8978#true} is VALID [2018-11-23 12:47:48,589 INFO L273 TraceCheckUtils]: 2: Hoare triple {8978#true} assume true; {8978#true} is VALID [2018-11-23 12:47:48,589 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {8978#true} {8978#true} #633#return; {8978#true} is VALID [2018-11-23 12:47:48,589 INFO L256 TraceCheckUtils]: 4: Hoare triple {8978#true} call #t~ret138 := main(); {8978#true} is VALID [2018-11-23 12:47:48,589 INFO L273 TraceCheckUtils]: 5: Hoare triple {8978#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {8978#true} is VALID [2018-11-23 12:47:48,590 INFO L256 TraceCheckUtils]: 6: Hoare triple {8978#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {8978#true} is VALID [2018-11-23 12:47:48,594 INFO L273 TraceCheckUtils]: 7: Hoare triple {8978#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,595 INFO L273 TraceCheckUtils]: 8: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,596 INFO L273 TraceCheckUtils]: 9: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,596 INFO L273 TraceCheckUtils]: 10: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,596 INFO L273 TraceCheckUtils]: 11: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,597 INFO L273 TraceCheckUtils]: 12: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,597 INFO L273 TraceCheckUtils]: 13: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !false; {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,598 INFO L273 TraceCheckUtils]: 14: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,598 INFO L273 TraceCheckUtils]: 15: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,599 INFO L273 TraceCheckUtils]: 16: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,599 INFO L273 TraceCheckUtils]: 17: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} is VALID [2018-11-23 12:47:48,600 INFO L273 TraceCheckUtils]: 18: Hoare triple {8980#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28) (+ (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 28)) 1)) (+ ssl3_accept_~s.offset 52)) 8464)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8981#(= |ssl3_accept_#t~mem28| 8464)} is VALID [2018-11-23 12:47:48,601 INFO L273 TraceCheckUtils]: 19: Hoare triple {8981#(= |ssl3_accept_#t~mem28| 8464)} assume 8195 == #t~mem28;havoc #t~mem28; {8979#false} is VALID [2018-11-23 12:47:48,601 INFO L273 TraceCheckUtils]: 20: Hoare triple {8979#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,601 INFO L273 TraceCheckUtils]: 21: Hoare triple {8979#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {8979#false} is VALID [2018-11-23 12:47:48,602 INFO L273 TraceCheckUtils]: 22: Hoare triple {8979#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,602 INFO L273 TraceCheckUtils]: 23: Hoare triple {8979#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,603 INFO L273 TraceCheckUtils]: 24: Hoare triple {8979#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {8979#false} is VALID [2018-11-23 12:47:48,603 INFO L273 TraceCheckUtils]: 25: Hoare triple {8979#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,603 INFO L273 TraceCheckUtils]: 26: Hoare triple {8979#false} assume 12292 != #t~mem62;havoc #t~mem62; {8979#false} is VALID [2018-11-23 12:47:48,604 INFO L273 TraceCheckUtils]: 27: Hoare triple {8979#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {8979#false} is VALID [2018-11-23 12:47:48,604 INFO L273 TraceCheckUtils]: 28: Hoare triple {8979#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,604 INFO L273 TraceCheckUtils]: 29: Hoare triple {8979#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {8979#false} is VALID [2018-11-23 12:47:48,605 INFO L273 TraceCheckUtils]: 30: Hoare triple {8979#false} ~skip~0 := 0; {8979#false} is VALID [2018-11-23 12:47:48,605 INFO L273 TraceCheckUtils]: 31: Hoare triple {8979#false} assume !false; {8979#false} is VALID [2018-11-23 12:47:48,605 INFO L273 TraceCheckUtils]: 32: Hoare triple {8979#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,605 INFO L273 TraceCheckUtils]: 33: Hoare triple {8979#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,605 INFO L273 TraceCheckUtils]: 34: Hoare triple {8979#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,606 INFO L273 TraceCheckUtils]: 35: Hoare triple {8979#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,606 INFO L273 TraceCheckUtils]: 36: Hoare triple {8979#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,606 INFO L273 TraceCheckUtils]: 37: Hoare triple {8979#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,606 INFO L273 TraceCheckUtils]: 38: Hoare triple {8979#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,606 INFO L273 TraceCheckUtils]: 39: Hoare triple {8979#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,607 INFO L273 TraceCheckUtils]: 40: Hoare triple {8979#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,607 INFO L273 TraceCheckUtils]: 41: Hoare triple {8979#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,607 INFO L273 TraceCheckUtils]: 42: Hoare triple {8979#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,607 INFO L273 TraceCheckUtils]: 43: Hoare triple {8979#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,607 INFO L273 TraceCheckUtils]: 44: Hoare triple {8979#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,608 INFO L273 TraceCheckUtils]: 45: Hoare triple {8979#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,608 INFO L273 TraceCheckUtils]: 46: Hoare triple {8979#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,608 INFO L273 TraceCheckUtils]: 47: Hoare triple {8979#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,608 INFO L273 TraceCheckUtils]: 48: Hoare triple {8979#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,608 INFO L273 TraceCheckUtils]: 49: Hoare triple {8979#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,608 INFO L273 TraceCheckUtils]: 50: Hoare triple {8979#false} assume 8544 == #t~mem41;havoc #t~mem41; {8979#false} is VALID [2018-11-23 12:47:48,609 INFO L273 TraceCheckUtils]: 51: Hoare triple {8979#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,609 INFO L273 TraceCheckUtils]: 52: Hoare triple {8979#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,609 INFO L273 TraceCheckUtils]: 53: Hoare triple {8979#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {8979#false} is VALID [2018-11-23 12:47:48,609 INFO L273 TraceCheckUtils]: 54: Hoare triple {8979#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {8979#false} is VALID [2018-11-23 12:47:48,609 INFO L273 TraceCheckUtils]: 55: Hoare triple {8979#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {8979#false} is VALID [2018-11-23 12:47:48,610 INFO L273 TraceCheckUtils]: 56: Hoare triple {8979#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {8979#false} is VALID [2018-11-23 12:47:48,610 INFO L273 TraceCheckUtils]: 57: Hoare triple {8979#false} assume 7 == ~blastFlag~0; {8979#false} is VALID [2018-11-23 12:47:48,610 INFO L273 TraceCheckUtils]: 58: Hoare triple {8979#false} assume !false; {8979#false} is VALID [2018-11-23 12:47:48,623 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:48,623 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:48,623 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:48,623 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-23 12:47:48,624 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:48,624 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:48,759 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:48,760 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:48,760 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:48,760 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:48,760 INFO L87 Difference]: Start difference. First operand 194 states and 289 transitions. Second operand 4 states. [2018-11-23 12:47:49,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:49,922 INFO L93 Difference]: Finished difference Result 366 states and 553 transitions. [2018-11-23 12:47:49,922 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:49,922 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 59 [2018-11-23 12:47:49,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:49,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:49,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 425 transitions. [2018-11-23 12:47:49,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:49,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 425 transitions. [2018-11-23 12:47:49,928 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 425 transitions. [2018-11-23 12:47:50,349 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 425 edges. 425 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:50,354 INFO L225 Difference]: With dead ends: 366 [2018-11-23 12:47:50,354 INFO L226 Difference]: Without dead ends: 197 [2018-11-23 12:47:50,355 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:50,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2018-11-23 12:47:50,431 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 194. [2018-11-23 12:47:50,431 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:50,431 INFO L82 GeneralOperation]: Start isEquivalent. First operand 197 states. Second operand 194 states. [2018-11-23 12:47:50,431 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand 194 states. [2018-11-23 12:47:50,432 INFO L87 Difference]: Start difference. First operand 197 states. Second operand 194 states. [2018-11-23 12:47:50,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:50,436 INFO L93 Difference]: Finished difference Result 197 states and 292 transitions. [2018-11-23 12:47:50,436 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 292 transitions. [2018-11-23 12:47:50,436 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:50,437 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:50,437 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 197 states. [2018-11-23 12:47:50,437 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 197 states. [2018-11-23 12:47:50,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:50,441 INFO L93 Difference]: Finished difference Result 197 states and 292 transitions. [2018-11-23 12:47:50,441 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 292 transitions. [2018-11-23 12:47:50,442 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:50,442 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:50,442 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:50,442 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:50,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:50,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 288 transitions. [2018-11-23 12:47:50,447 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 288 transitions. Word has length 59 [2018-11-23 12:47:50,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:50,447 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 288 transitions. [2018-11-23 12:47:50,447 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:50,447 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 288 transitions. [2018-11-23 12:47:50,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2018-11-23 12:47:50,448 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:50,448 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:50,448 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:50,449 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:50,449 INFO L82 PathProgramCache]: Analyzing trace with hash 1484856716, now seen corresponding path program 1 times [2018-11-23 12:47:50,449 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:50,449 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:50,450 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:50,450 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:50,450 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:50,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:50,634 INFO L256 TraceCheckUtils]: 0: Hoare triple {10039#true} call ULTIMATE.init(); {10039#true} is VALID [2018-11-23 12:47:50,635 INFO L273 TraceCheckUtils]: 1: Hoare triple {10039#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,635 INFO L273 TraceCheckUtils]: 2: Hoare triple {10039#true} assume true; {10039#true} is VALID [2018-11-23 12:47:50,635 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {10039#true} {10039#true} #633#return; {10039#true} is VALID [2018-11-23 12:47:50,636 INFO L256 TraceCheckUtils]: 4: Hoare triple {10039#true} call #t~ret138 := main(); {10039#true} is VALID [2018-11-23 12:47:50,636 INFO L273 TraceCheckUtils]: 5: Hoare triple {10039#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,636 INFO L256 TraceCheckUtils]: 6: Hoare triple {10039#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {10039#true} is VALID [2018-11-23 12:47:50,636 INFO L273 TraceCheckUtils]: 7: Hoare triple {10039#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,636 INFO L273 TraceCheckUtils]: 8: Hoare triple {10039#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 9: Hoare triple {10039#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 10: Hoare triple {10039#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 11: Hoare triple {10039#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 12: Hoare triple {10039#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 13: Hoare triple {10039#true} assume !false; {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 14: Hoare triple {10039#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 15: Hoare triple {10039#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,637 INFO L273 TraceCheckUtils]: 16: Hoare triple {10039#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 17: Hoare triple {10039#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 18: Hoare triple {10039#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 19: Hoare triple {10039#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 20: Hoare triple {10039#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 21: Hoare triple {10039#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 22: Hoare triple {10039#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10039#true} is VALID [2018-11-23 12:47:50,638 INFO L273 TraceCheckUtils]: 23: Hoare triple {10039#true} assume 8464 == #t~mem32;havoc #t~mem32; {10039#true} is VALID [2018-11-23 12:47:50,639 INFO L273 TraceCheckUtils]: 24: Hoare triple {10039#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {10039#true} is VALID [2018-11-23 12:47:50,639 INFO L273 TraceCheckUtils]: 25: Hoare triple {10039#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {10039#true} is VALID [2018-11-23 12:47:50,640 INFO L273 TraceCheckUtils]: 26: Hoare triple {10039#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,640 INFO L273 TraceCheckUtils]: 27: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,641 INFO L273 TraceCheckUtils]: 28: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,641 INFO L273 TraceCheckUtils]: 29: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,641 INFO L273 TraceCheckUtils]: 30: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,642 INFO L273 TraceCheckUtils]: 31: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,642 INFO L273 TraceCheckUtils]: 32: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,643 INFO L273 TraceCheckUtils]: 33: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,643 INFO L273 TraceCheckUtils]: 34: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,644 INFO L273 TraceCheckUtils]: 35: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:50,645 INFO L273 TraceCheckUtils]: 36: Hoare triple {10041#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10042#(= |ssl3_accept_#t~mem29| 8496)} is VALID [2018-11-23 12:47:50,645 INFO L273 TraceCheckUtils]: 37: Hoare triple {10042#(= |ssl3_accept_#t~mem29| 8496)} assume 8480 == #t~mem29;havoc #t~mem29; {10040#false} is VALID [2018-11-23 12:47:50,646 INFO L273 TraceCheckUtils]: 38: Hoare triple {10040#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {10040#false} is VALID [2018-11-23 12:47:50,646 INFO L273 TraceCheckUtils]: 39: Hoare triple {10040#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,646 INFO L273 TraceCheckUtils]: 40: Hoare triple {10040#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,646 INFO L273 TraceCheckUtils]: 41: Hoare triple {10040#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {10040#false} is VALID [2018-11-23 12:47:50,647 INFO L273 TraceCheckUtils]: 42: Hoare triple {10040#false} ~skip~0 := 0; {10040#false} is VALID [2018-11-23 12:47:50,647 INFO L273 TraceCheckUtils]: 43: Hoare triple {10040#false} assume !false; {10040#false} is VALID [2018-11-23 12:47:50,647 INFO L273 TraceCheckUtils]: 44: Hoare triple {10040#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,647 INFO L273 TraceCheckUtils]: 45: Hoare triple {10040#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,647 INFO L273 TraceCheckUtils]: 46: Hoare triple {10040#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,648 INFO L273 TraceCheckUtils]: 47: Hoare triple {10040#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,648 INFO L273 TraceCheckUtils]: 48: Hoare triple {10040#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,648 INFO L273 TraceCheckUtils]: 49: Hoare triple {10040#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,648 INFO L273 TraceCheckUtils]: 50: Hoare triple {10040#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 51: Hoare triple {10040#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 52: Hoare triple {10040#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 53: Hoare triple {10040#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 54: Hoare triple {10040#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 55: Hoare triple {10040#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 56: Hoare triple {10040#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 57: Hoare triple {10040#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,649 INFO L273 TraceCheckUtils]: 58: Hoare triple {10040#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 59: Hoare triple {10040#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 60: Hoare triple {10040#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 61: Hoare triple {10040#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 62: Hoare triple {10040#false} assume 8544 == #t~mem41;havoc #t~mem41; {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 63: Hoare triple {10040#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 64: Hoare triple {10040#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 65: Hoare triple {10040#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {10040#false} is VALID [2018-11-23 12:47:50,650 INFO L273 TraceCheckUtils]: 66: Hoare triple {10040#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {10040#false} is VALID [2018-11-23 12:47:50,651 INFO L273 TraceCheckUtils]: 67: Hoare triple {10040#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {10040#false} is VALID [2018-11-23 12:47:50,651 INFO L273 TraceCheckUtils]: 68: Hoare triple {10040#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {10040#false} is VALID [2018-11-23 12:47:50,651 INFO L273 TraceCheckUtils]: 69: Hoare triple {10040#false} assume 7 == ~blastFlag~0; {10040#false} is VALID [2018-11-23 12:47:50,651 INFO L273 TraceCheckUtils]: 70: Hoare triple {10040#false} assume !false; {10040#false} is VALID [2018-11-23 12:47:50,654 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:50,654 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:50,654 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:50,655 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 71 [2018-11-23 12:47:50,655 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:50,655 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:50,727 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:50,728 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:50,728 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:50,728 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:50,728 INFO L87 Difference]: Start difference. First operand 194 states and 288 transitions. Second operand 4 states. [2018-11-23 12:47:52,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,317 INFO L93 Difference]: Finished difference Result 383 states and 573 transitions. [2018-11-23 12:47:52,317 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:52,317 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 71 [2018-11-23 12:47:52,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:52,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:52,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-23 12:47:52,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:52,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2018-11-23 12:47:52,323 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 471 transitions. [2018-11-23 12:47:52,793 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 471 edges. 471 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:52,798 INFO L225 Difference]: With dead ends: 383 [2018-11-23 12:47:52,798 INFO L226 Difference]: Without dead ends: 214 [2018-11-23 12:47:52,798 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:52,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2018-11-23 12:47:52,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 194. [2018-11-23 12:47:52,874 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:52,874 INFO L82 GeneralOperation]: Start isEquivalent. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:52,874 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:52,875 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 194 states. [2018-11-23 12:47:52,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,879 INFO L93 Difference]: Finished difference Result 214 states and 312 transitions. [2018-11-23 12:47:52,879 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 312 transitions. [2018-11-23 12:47:52,880 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:52,880 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:52,880 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:52,880 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 214 states. [2018-11-23 12:47:52,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:52,884 INFO L93 Difference]: Finished difference Result 214 states and 312 transitions. [2018-11-23 12:47:52,884 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 312 transitions. [2018-11-23 12:47:52,885 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:52,885 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:52,885 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:52,885 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:52,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:52,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 287 transitions. [2018-11-23 12:47:52,890 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 287 transitions. Word has length 71 [2018-11-23 12:47:52,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:52,890 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 287 transitions. [2018-11-23 12:47:52,890 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:52,890 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 287 transitions. [2018-11-23 12:47:52,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 12:47:52,891 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:52,891 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:52,892 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:52,892 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:52,892 INFO L82 PathProgramCache]: Analyzing trace with hash 1155270063, now seen corresponding path program 1 times [2018-11-23 12:47:52,892 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:52,892 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:52,893 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:52,893 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:52,893 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:52,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:53,068 INFO L256 TraceCheckUtils]: 0: Hoare triple {11155#true} call ULTIMATE.init(); {11155#true} is VALID [2018-11-23 12:47:53,068 INFO L273 TraceCheckUtils]: 1: Hoare triple {11155#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,069 INFO L273 TraceCheckUtils]: 2: Hoare triple {11155#true} assume true; {11155#true} is VALID [2018-11-23 12:47:53,069 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {11155#true} {11155#true} #633#return; {11155#true} is VALID [2018-11-23 12:47:53,069 INFO L256 TraceCheckUtils]: 4: Hoare triple {11155#true} call #t~ret138 := main(); {11155#true} is VALID [2018-11-23 12:47:53,069 INFO L273 TraceCheckUtils]: 5: Hoare triple {11155#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,070 INFO L256 TraceCheckUtils]: 6: Hoare triple {11155#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {11155#true} is VALID [2018-11-23 12:47:53,070 INFO L273 TraceCheckUtils]: 7: Hoare triple {11155#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,070 INFO L273 TraceCheckUtils]: 8: Hoare triple {11155#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {11155#true} is VALID [2018-11-23 12:47:53,070 INFO L273 TraceCheckUtils]: 9: Hoare triple {11155#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {11155#true} is VALID [2018-11-23 12:47:53,070 INFO L273 TraceCheckUtils]: 10: Hoare triple {11155#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {11155#true} is VALID [2018-11-23 12:47:53,070 INFO L273 TraceCheckUtils]: 11: Hoare triple {11155#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 12: Hoare triple {11155#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 13: Hoare triple {11155#true} assume !false; {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 14: Hoare triple {11155#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 15: Hoare triple {11155#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 16: Hoare triple {11155#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 17: Hoare triple {11155#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 18: Hoare triple {11155#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,071 INFO L273 TraceCheckUtils]: 19: Hoare triple {11155#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,072 INFO L273 TraceCheckUtils]: 20: Hoare triple {11155#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,072 INFO L273 TraceCheckUtils]: 21: Hoare triple {11155#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,072 INFO L273 TraceCheckUtils]: 22: Hoare triple {11155#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11155#true} is VALID [2018-11-23 12:47:53,072 INFO L273 TraceCheckUtils]: 23: Hoare triple {11155#true} assume 8464 == #t~mem32;havoc #t~mem32; {11155#true} is VALID [2018-11-23 12:47:53,072 INFO L273 TraceCheckUtils]: 24: Hoare triple {11155#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {11155#true} is VALID [2018-11-23 12:47:53,072 INFO L273 TraceCheckUtils]: 25: Hoare triple {11155#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {11155#true} is VALID [2018-11-23 12:47:53,074 INFO L273 TraceCheckUtils]: 26: Hoare triple {11155#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,074 INFO L273 TraceCheckUtils]: 27: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,074 INFO L273 TraceCheckUtils]: 28: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,075 INFO L273 TraceCheckUtils]: 29: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,075 INFO L273 TraceCheckUtils]: 30: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,075 INFO L273 TraceCheckUtils]: 31: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,076 INFO L273 TraceCheckUtils]: 32: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,076 INFO L273 TraceCheckUtils]: 33: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,076 INFO L273 TraceCheckUtils]: 34: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,077 INFO L273 TraceCheckUtils]: 35: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,078 INFO L273 TraceCheckUtils]: 36: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:53,078 INFO L273 TraceCheckUtils]: 37: Hoare triple {11157#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11158#(= |ssl3_accept_#t~mem30| 8496)} is VALID [2018-11-23 12:47:53,079 INFO L273 TraceCheckUtils]: 38: Hoare triple {11158#(= |ssl3_accept_#t~mem30| 8496)} assume 8481 == #t~mem30;havoc #t~mem30; {11156#false} is VALID [2018-11-23 12:47:53,079 INFO L273 TraceCheckUtils]: 39: Hoare triple {11156#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {11156#false} is VALID [2018-11-23 12:47:53,079 INFO L273 TraceCheckUtils]: 40: Hoare triple {11156#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,080 INFO L273 TraceCheckUtils]: 41: Hoare triple {11156#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,080 INFO L273 TraceCheckUtils]: 42: Hoare triple {11156#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {11156#false} is VALID [2018-11-23 12:47:53,080 INFO L273 TraceCheckUtils]: 43: Hoare triple {11156#false} ~skip~0 := 0; {11156#false} is VALID [2018-11-23 12:47:53,080 INFO L273 TraceCheckUtils]: 44: Hoare triple {11156#false} assume !false; {11156#false} is VALID [2018-11-23 12:47:53,080 INFO L273 TraceCheckUtils]: 45: Hoare triple {11156#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,081 INFO L273 TraceCheckUtils]: 46: Hoare triple {11156#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,081 INFO L273 TraceCheckUtils]: 47: Hoare triple {11156#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,081 INFO L273 TraceCheckUtils]: 48: Hoare triple {11156#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,081 INFO L273 TraceCheckUtils]: 49: Hoare triple {11156#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,082 INFO L273 TraceCheckUtils]: 50: Hoare triple {11156#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,082 INFO L273 TraceCheckUtils]: 51: Hoare triple {11156#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,082 INFO L273 TraceCheckUtils]: 52: Hoare triple {11156#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,082 INFO L273 TraceCheckUtils]: 53: Hoare triple {11156#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,082 INFO L273 TraceCheckUtils]: 54: Hoare triple {11156#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,083 INFO L273 TraceCheckUtils]: 55: Hoare triple {11156#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,083 INFO L273 TraceCheckUtils]: 56: Hoare triple {11156#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,083 INFO L273 TraceCheckUtils]: 57: Hoare triple {11156#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,083 INFO L273 TraceCheckUtils]: 58: Hoare triple {11156#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,083 INFO L273 TraceCheckUtils]: 59: Hoare triple {11156#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,083 INFO L273 TraceCheckUtils]: 60: Hoare triple {11156#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 61: Hoare triple {11156#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 62: Hoare triple {11156#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 63: Hoare triple {11156#false} assume 8544 == #t~mem41;havoc #t~mem41; {11156#false} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 64: Hoare triple {11156#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 65: Hoare triple {11156#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,084 INFO L273 TraceCheckUtils]: 66: Hoare triple {11156#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {11156#false} is VALID [2018-11-23 12:47:53,085 INFO L273 TraceCheckUtils]: 67: Hoare triple {11156#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {11156#false} is VALID [2018-11-23 12:47:53,085 INFO L273 TraceCheckUtils]: 68: Hoare triple {11156#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {11156#false} is VALID [2018-11-23 12:47:53,085 INFO L273 TraceCheckUtils]: 69: Hoare triple {11156#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {11156#false} is VALID [2018-11-23 12:47:53,085 INFO L273 TraceCheckUtils]: 70: Hoare triple {11156#false} assume 7 == ~blastFlag~0; {11156#false} is VALID [2018-11-23 12:47:53,085 INFO L273 TraceCheckUtils]: 71: Hoare triple {11156#false} assume !false; {11156#false} is VALID [2018-11-23 12:47:53,089 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:53,090 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:53,090 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:53,090 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:53,091 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:53,091 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:53,175 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:53,175 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:53,176 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:53,176 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:53,176 INFO L87 Difference]: Start difference. First operand 194 states and 287 transitions. Second operand 4 states. [2018-11-23 12:47:54,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,261 INFO L93 Difference]: Finished difference Result 381 states and 569 transitions. [2018-11-23 12:47:54,261 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:54,262 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:54,262 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:54,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:54,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 468 transitions. [2018-11-23 12:47:54,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:54,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 468 transitions. [2018-11-23 12:47:54,269 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 468 transitions. [2018-11-23 12:47:54,726 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 468 edges. 468 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:54,731 INFO L225 Difference]: With dead ends: 381 [2018-11-23 12:47:54,732 INFO L226 Difference]: Without dead ends: 212 [2018-11-23 12:47:54,732 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:54,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2018-11-23 12:47:54,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 194. [2018-11-23 12:47:54,803 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:54,804 INFO L82 GeneralOperation]: Start isEquivalent. First operand 212 states. Second operand 194 states. [2018-11-23 12:47:54,804 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand 194 states. [2018-11-23 12:47:54,804 INFO L87 Difference]: Start difference. First operand 212 states. Second operand 194 states. [2018-11-23 12:47:54,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,809 INFO L93 Difference]: Finished difference Result 212 states and 309 transitions. [2018-11-23 12:47:54,809 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 309 transitions. [2018-11-23 12:47:54,810 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:54,810 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:54,810 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 212 states. [2018-11-23 12:47:54,811 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 212 states. [2018-11-23 12:47:54,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:54,815 INFO L93 Difference]: Finished difference Result 212 states and 309 transitions. [2018-11-23 12:47:54,815 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 309 transitions. [2018-11-23 12:47:54,816 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:54,816 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:54,816 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:54,816 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:54,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:54,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 286 transitions. [2018-11-23 12:47:54,821 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 286 transitions. Word has length 72 [2018-11-23 12:47:54,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:54,821 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 286 transitions. [2018-11-23 12:47:54,821 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:54,821 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 286 transitions. [2018-11-23 12:47:54,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2018-11-23 12:47:54,822 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:54,822 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:54,823 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:54,823 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:54,823 INFO L82 PathProgramCache]: Analyzing trace with hash -488261392, now seen corresponding path program 1 times [2018-11-23 12:47:54,823 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:54,823 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:54,824 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:54,824 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:54,824 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:54,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:54,968 INFO L256 TraceCheckUtils]: 0: Hoare triple {12264#true} call ULTIMATE.init(); {12264#true} is VALID [2018-11-23 12:47:54,968 INFO L273 TraceCheckUtils]: 1: Hoare triple {12264#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,968 INFO L273 TraceCheckUtils]: 2: Hoare triple {12264#true} assume true; {12264#true} is VALID [2018-11-23 12:47:54,969 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {12264#true} {12264#true} #633#return; {12264#true} is VALID [2018-11-23 12:47:54,969 INFO L256 TraceCheckUtils]: 4: Hoare triple {12264#true} call #t~ret138 := main(); {12264#true} is VALID [2018-11-23 12:47:54,969 INFO L273 TraceCheckUtils]: 5: Hoare triple {12264#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,969 INFO L256 TraceCheckUtils]: 6: Hoare triple {12264#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {12264#true} is VALID [2018-11-23 12:47:54,970 INFO L273 TraceCheckUtils]: 7: Hoare triple {12264#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,970 INFO L273 TraceCheckUtils]: 8: Hoare triple {12264#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {12264#true} is VALID [2018-11-23 12:47:54,970 INFO L273 TraceCheckUtils]: 9: Hoare triple {12264#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {12264#true} is VALID [2018-11-23 12:47:54,970 INFO L273 TraceCheckUtils]: 10: Hoare triple {12264#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 11: Hoare triple {12264#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 12: Hoare triple {12264#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 13: Hoare triple {12264#true} assume !false; {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 14: Hoare triple {12264#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 15: Hoare triple {12264#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 16: Hoare triple {12264#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 17: Hoare triple {12264#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,971 INFO L273 TraceCheckUtils]: 18: Hoare triple {12264#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 19: Hoare triple {12264#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 20: Hoare triple {12264#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 21: Hoare triple {12264#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 22: Hoare triple {12264#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 23: Hoare triple {12264#true} assume 8464 == #t~mem32;havoc #t~mem32; {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 24: Hoare triple {12264#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {12264#true} is VALID [2018-11-23 12:47:54,972 INFO L273 TraceCheckUtils]: 25: Hoare triple {12264#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {12264#true} is VALID [2018-11-23 12:47:54,973 INFO L273 TraceCheckUtils]: 26: Hoare triple {12264#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,974 INFO L273 TraceCheckUtils]: 27: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,974 INFO L273 TraceCheckUtils]: 28: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,974 INFO L273 TraceCheckUtils]: 29: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,975 INFO L273 TraceCheckUtils]: 30: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,975 INFO L273 TraceCheckUtils]: 31: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,975 INFO L273 TraceCheckUtils]: 32: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,976 INFO L273 TraceCheckUtils]: 33: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,976 INFO L273 TraceCheckUtils]: 34: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,977 INFO L273 TraceCheckUtils]: 35: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,978 INFO L273 TraceCheckUtils]: 36: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,978 INFO L273 TraceCheckUtils]: 37: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:54,979 INFO L273 TraceCheckUtils]: 38: Hoare triple {12266#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12267#(= |ssl3_accept_#t~mem31| 8496)} is VALID [2018-11-23 12:47:54,980 INFO L273 TraceCheckUtils]: 39: Hoare triple {12267#(= |ssl3_accept_#t~mem31| 8496)} assume 8482 == #t~mem31;havoc #t~mem31; {12265#false} is VALID [2018-11-23 12:47:54,980 INFO L273 TraceCheckUtils]: 40: Hoare triple {12265#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,980 INFO L273 TraceCheckUtils]: 41: Hoare triple {12265#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,980 INFO L273 TraceCheckUtils]: 42: Hoare triple {12265#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {12265#false} is VALID [2018-11-23 12:47:54,980 INFO L273 TraceCheckUtils]: 43: Hoare triple {12265#false} ~skip~0 := 0; {12265#false} is VALID [2018-11-23 12:47:54,981 INFO L273 TraceCheckUtils]: 44: Hoare triple {12265#false} assume !false; {12265#false} is VALID [2018-11-23 12:47:54,981 INFO L273 TraceCheckUtils]: 45: Hoare triple {12265#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,981 INFO L273 TraceCheckUtils]: 46: Hoare triple {12265#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,981 INFO L273 TraceCheckUtils]: 47: Hoare triple {12265#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,982 INFO L273 TraceCheckUtils]: 48: Hoare triple {12265#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,982 INFO L273 TraceCheckUtils]: 49: Hoare triple {12265#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,982 INFO L273 TraceCheckUtils]: 50: Hoare triple {12265#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,982 INFO L273 TraceCheckUtils]: 51: Hoare triple {12265#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,982 INFO L273 TraceCheckUtils]: 52: Hoare triple {12265#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,983 INFO L273 TraceCheckUtils]: 53: Hoare triple {12265#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,983 INFO L273 TraceCheckUtils]: 54: Hoare triple {12265#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,983 INFO L273 TraceCheckUtils]: 55: Hoare triple {12265#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,984 INFO L273 TraceCheckUtils]: 56: Hoare triple {12265#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,984 INFO L273 TraceCheckUtils]: 57: Hoare triple {12265#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,984 INFO L273 TraceCheckUtils]: 58: Hoare triple {12265#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,984 INFO L273 TraceCheckUtils]: 59: Hoare triple {12265#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,985 INFO L273 TraceCheckUtils]: 60: Hoare triple {12265#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,985 INFO L273 TraceCheckUtils]: 61: Hoare triple {12265#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,985 INFO L273 TraceCheckUtils]: 62: Hoare triple {12265#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,985 INFO L273 TraceCheckUtils]: 63: Hoare triple {12265#false} assume 8544 == #t~mem41;havoc #t~mem41; {12265#false} is VALID [2018-11-23 12:47:54,985 INFO L273 TraceCheckUtils]: 64: Hoare triple {12265#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,986 INFO L273 TraceCheckUtils]: 65: Hoare triple {12265#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,986 INFO L273 TraceCheckUtils]: 66: Hoare triple {12265#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {12265#false} is VALID [2018-11-23 12:47:54,986 INFO L273 TraceCheckUtils]: 67: Hoare triple {12265#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {12265#false} is VALID [2018-11-23 12:47:54,986 INFO L273 TraceCheckUtils]: 68: Hoare triple {12265#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {12265#false} is VALID [2018-11-23 12:47:54,986 INFO L273 TraceCheckUtils]: 69: Hoare triple {12265#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {12265#false} is VALID [2018-11-23 12:47:54,986 INFO L273 TraceCheckUtils]: 70: Hoare triple {12265#false} assume 7 == ~blastFlag~0; {12265#false} is VALID [2018-11-23 12:47:54,987 INFO L273 TraceCheckUtils]: 71: Hoare triple {12265#false} assume !false; {12265#false} is VALID [2018-11-23 12:47:54,991 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:54,991 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:54,991 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:54,992 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:54,992 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:54,992 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:55,069 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 72 edges. 72 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:55,070 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:55,070 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:55,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:55,070 INFO L87 Difference]: Start difference. First operand 194 states and 286 transitions. Second operand 4 states. [2018-11-23 12:47:56,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:56,102 INFO L93 Difference]: Finished difference Result 380 states and 566 transitions. [2018-11-23 12:47:56,103 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:56,103 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 72 [2018-11-23 12:47:56,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:56,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:56,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-23 12:47:56,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:56,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 466 transitions. [2018-11-23 12:47:56,108 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 466 transitions. [2018-11-23 12:47:56,588 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 466 edges. 466 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:56,592 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:47:56,593 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:47:56,593 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:47:56,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:47:56,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:47:56,758 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:56,758 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:56,758 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:56,759 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:56,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:56,764 INFO L93 Difference]: Finished difference Result 211 states and 307 transitions. [2018-11-23 12:47:56,764 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 307 transitions. [2018-11-23 12:47:56,764 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:56,764 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:56,764 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:56,764 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:56,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:56,768 INFO L93 Difference]: Finished difference Result 211 states and 307 transitions. [2018-11-23 12:47:56,768 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 307 transitions. [2018-11-23 12:47:56,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:56,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:56,771 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:56,771 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:56,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:56,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 285 transitions. [2018-11-23 12:47:56,776 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 285 transitions. Word has length 72 [2018-11-23 12:47:56,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:56,776 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 285 transitions. [2018-11-23 12:47:56,776 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:56,776 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 285 transitions. [2018-11-23 12:47:56,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2018-11-23 12:47:56,777 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:56,777 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:56,778 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:56,778 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:56,778 INFO L82 PathProgramCache]: Analyzing trace with hash 2055209609, now seen corresponding path program 1 times [2018-11-23 12:47:56,778 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:56,778 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:56,779 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:56,779 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:56,780 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:56,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:57,427 WARN L180 SmtUtils]: Spent 164.00 ms on a formula simplification. DAG size of input: 20 DAG size of output: 17 [2018-11-23 12:47:57,445 INFO L256 TraceCheckUtils]: 0: Hoare triple {13369#true} call ULTIMATE.init(); {13369#true} is VALID [2018-11-23 12:47:57,445 INFO L273 TraceCheckUtils]: 1: Hoare triple {13369#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,446 INFO L273 TraceCheckUtils]: 2: Hoare triple {13369#true} assume true; {13369#true} is VALID [2018-11-23 12:47:57,446 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {13369#true} {13369#true} #633#return; {13369#true} is VALID [2018-11-23 12:47:57,446 INFO L256 TraceCheckUtils]: 4: Hoare triple {13369#true} call #t~ret138 := main(); {13369#true} is VALID [2018-11-23 12:47:57,446 INFO L273 TraceCheckUtils]: 5: Hoare triple {13369#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,447 INFO L256 TraceCheckUtils]: 6: Hoare triple {13369#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {13369#true} is VALID [2018-11-23 12:47:57,447 INFO L273 TraceCheckUtils]: 7: Hoare triple {13369#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,447 INFO L273 TraceCheckUtils]: 8: Hoare triple {13369#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {13369#true} is VALID [2018-11-23 12:47:57,447 INFO L273 TraceCheckUtils]: 9: Hoare triple {13369#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {13369#true} is VALID [2018-11-23 12:47:57,447 INFO L273 TraceCheckUtils]: 10: Hoare triple {13369#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 11: Hoare triple {13369#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 12: Hoare triple {13369#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 13: Hoare triple {13369#true} assume !false; {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 14: Hoare triple {13369#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 15: Hoare triple {13369#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 16: Hoare triple {13369#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 17: Hoare triple {13369#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,448 INFO L273 TraceCheckUtils]: 18: Hoare triple {13369#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 19: Hoare triple {13369#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 20: Hoare triple {13369#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 21: Hoare triple {13369#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 22: Hoare triple {13369#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 23: Hoare triple {13369#true} assume 8464 == #t~mem32;havoc #t~mem32; {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 24: Hoare triple {13369#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {13369#true} is VALID [2018-11-23 12:47:57,449 INFO L273 TraceCheckUtils]: 25: Hoare triple {13369#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {13369#true} is VALID [2018-11-23 12:47:57,467 INFO L273 TraceCheckUtils]: 26: Hoare triple {13369#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:57,476 INFO L273 TraceCheckUtils]: 27: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:57,491 INFO L273 TraceCheckUtils]: 28: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:57,500 INFO L273 TraceCheckUtils]: 29: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:57,515 INFO L273 TraceCheckUtils]: 30: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:57,524 INFO L273 TraceCheckUtils]: 31: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:57,525 INFO L273 TraceCheckUtils]: 32: Hoare triple {13371#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13372#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem25| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 33: Hoare triple {13372#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem25| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 16384 == #t~mem25;havoc #t~mem25; {13370#false} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 34: Hoare triple {13370#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 35: Hoare triple {13370#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {13370#false} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 36: Hoare triple {13370#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 37: Hoare triple {13370#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 38: Hoare triple {13370#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {13370#false} is VALID [2018-11-23 12:47:57,526 INFO L273 TraceCheckUtils]: 39: Hoare triple {13370#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 40: Hoare triple {13370#false} assume 12292 != #t~mem62;havoc #t~mem62; {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 41: Hoare triple {13370#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 42: Hoare triple {13370#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 43: Hoare triple {13370#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 44: Hoare triple {13370#false} ~skip~0 := 0; {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 45: Hoare triple {13370#false} assume !false; {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 46: Hoare triple {13370#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,527 INFO L273 TraceCheckUtils]: 47: Hoare triple {13370#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 48: Hoare triple {13370#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 49: Hoare triple {13370#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 50: Hoare triple {13370#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 51: Hoare triple {13370#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 52: Hoare triple {13370#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 53: Hoare triple {13370#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 54: Hoare triple {13370#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,528 INFO L273 TraceCheckUtils]: 55: Hoare triple {13370#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 56: Hoare triple {13370#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 57: Hoare triple {13370#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 58: Hoare triple {13370#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 59: Hoare triple {13370#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 60: Hoare triple {13370#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 61: Hoare triple {13370#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 62: Hoare triple {13370#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 63: Hoare triple {13370#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,529 INFO L273 TraceCheckUtils]: 64: Hoare triple {13370#false} assume 8544 == #t~mem41;havoc #t~mem41; {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 65: Hoare triple {13370#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 66: Hoare triple {13370#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 67: Hoare triple {13370#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 68: Hoare triple {13370#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 69: Hoare triple {13370#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 70: Hoare triple {13370#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 71: Hoare triple {13370#false} assume 7 == ~blastFlag~0; {13370#false} is VALID [2018-11-23 12:47:57,530 INFO L273 TraceCheckUtils]: 72: Hoare triple {13370#false} assume !false; {13370#false} is VALID [2018-11-23 12:47:57,534 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:57,534 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:57,534 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:57,535 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 73 [2018-11-23 12:47:57,535 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:57,535 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:57,613 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:57,614 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:57,614 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:57,614 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:57,615 INFO L87 Difference]: Start difference. First operand 194 states and 285 transitions. Second operand 4 states. [2018-11-23 12:47:58,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:58,500 INFO L93 Difference]: Finished difference Result 380 states and 564 transitions. [2018-11-23 12:47:58,500 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:47:58,501 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 73 [2018-11-23 12:47:58,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:47:58,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:58,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:47:58,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:47:58,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 465 transitions. [2018-11-23 12:47:58,505 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 465 transitions. [2018-11-23 12:47:58,969 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 465 edges. 465 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:58,973 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:47:58,973 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:47:58,974 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:58,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:47:59,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:47:59,036 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:47:59,037 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:59,037 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:59,037 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:47:59,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:59,041 INFO L93 Difference]: Finished difference Result 211 states and 306 transitions. [2018-11-23 12:47:59,041 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 306 transitions. [2018-11-23 12:47:59,042 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:59,042 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:59,042 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:59,042 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:47:59,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:47:59,046 INFO L93 Difference]: Finished difference Result 211 states and 306 transitions. [2018-11-23 12:47:59,046 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 306 transitions. [2018-11-23 12:47:59,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:47:59,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:47:59,046 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:47:59,047 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:47:59,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:47:59,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 284 transitions. [2018-11-23 12:47:59,050 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 284 transitions. Word has length 73 [2018-11-23 12:47:59,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:47:59,050 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 284 transitions. [2018-11-23 12:47:59,050 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:47:59,050 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 284 transitions. [2018-11-23 12:47:59,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2018-11-23 12:47:59,051 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:47:59,051 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:47:59,051 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:47:59,051 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:47:59,051 INFO L82 PathProgramCache]: Analyzing trace with hash 1083985708, now seen corresponding path program 1 times [2018-11-23 12:47:59,051 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:47:59,051 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:47:59,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:59,052 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:47:59,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:47:59,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:47:59,309 INFO L256 TraceCheckUtils]: 0: Hoare triple {14472#true} call ULTIMATE.init(); {14472#true} is VALID [2018-11-23 12:47:59,309 INFO L273 TraceCheckUtils]: 1: Hoare triple {14472#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L273 TraceCheckUtils]: 2: Hoare triple {14472#true} assume true; {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {14472#true} {14472#true} #633#return; {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L256 TraceCheckUtils]: 4: Hoare triple {14472#true} call #t~ret138 := main(); {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L273 TraceCheckUtils]: 5: Hoare triple {14472#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L256 TraceCheckUtils]: 6: Hoare triple {14472#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L273 TraceCheckUtils]: 7: Hoare triple {14472#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L273 TraceCheckUtils]: 8: Hoare triple {14472#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {14472#true} is VALID [2018-11-23 12:47:59,310 INFO L273 TraceCheckUtils]: 9: Hoare triple {14472#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 10: Hoare triple {14472#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 11: Hoare triple {14472#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 12: Hoare triple {14472#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 13: Hoare triple {14472#true} assume !false; {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 14: Hoare triple {14472#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 15: Hoare triple {14472#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 16: Hoare triple {14472#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,311 INFO L273 TraceCheckUtils]: 17: Hoare triple {14472#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 18: Hoare triple {14472#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 19: Hoare triple {14472#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 20: Hoare triple {14472#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 21: Hoare triple {14472#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 22: Hoare triple {14472#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 23: Hoare triple {14472#true} assume 8464 == #t~mem32;havoc #t~mem32; {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 24: Hoare triple {14472#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {14472#true} is VALID [2018-11-23 12:47:59,312 INFO L273 TraceCheckUtils]: 25: Hoare triple {14472#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {14472#true} is VALID [2018-11-23 12:47:59,313 INFO L273 TraceCheckUtils]: 26: Hoare triple {14472#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,314 INFO L273 TraceCheckUtils]: 27: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,314 INFO L273 TraceCheckUtils]: 28: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,315 INFO L273 TraceCheckUtils]: 29: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,315 INFO L273 TraceCheckUtils]: 30: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,315 INFO L273 TraceCheckUtils]: 31: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,316 INFO L273 TraceCheckUtils]: 32: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:47:59,316 INFO L273 TraceCheckUtils]: 33: Hoare triple {14474#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14475#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem26| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:47:59,316 INFO L273 TraceCheckUtils]: 34: Hoare triple {14475#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem26| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8192 == #t~mem26;havoc #t~mem26; {14473#false} is VALID [2018-11-23 12:47:59,317 INFO L273 TraceCheckUtils]: 35: Hoare triple {14473#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,317 INFO L273 TraceCheckUtils]: 36: Hoare triple {14473#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {14473#false} is VALID [2018-11-23 12:47:59,317 INFO L273 TraceCheckUtils]: 37: Hoare triple {14473#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,317 INFO L273 TraceCheckUtils]: 38: Hoare triple {14473#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,317 INFO L273 TraceCheckUtils]: 39: Hoare triple {14473#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {14473#false} is VALID [2018-11-23 12:47:59,318 INFO L273 TraceCheckUtils]: 40: Hoare triple {14473#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,318 INFO L273 TraceCheckUtils]: 41: Hoare triple {14473#false} assume 12292 != #t~mem62;havoc #t~mem62; {14473#false} is VALID [2018-11-23 12:47:59,318 INFO L273 TraceCheckUtils]: 42: Hoare triple {14473#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {14473#false} is VALID [2018-11-23 12:47:59,319 INFO L273 TraceCheckUtils]: 43: Hoare triple {14473#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,319 INFO L273 TraceCheckUtils]: 44: Hoare triple {14473#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {14473#false} is VALID [2018-11-23 12:47:59,319 INFO L273 TraceCheckUtils]: 45: Hoare triple {14473#false} ~skip~0 := 0; {14473#false} is VALID [2018-11-23 12:47:59,319 INFO L273 TraceCheckUtils]: 46: Hoare triple {14473#false} assume !false; {14473#false} is VALID [2018-11-23 12:47:59,320 INFO L273 TraceCheckUtils]: 47: Hoare triple {14473#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,320 INFO L273 TraceCheckUtils]: 48: Hoare triple {14473#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,320 INFO L273 TraceCheckUtils]: 49: Hoare triple {14473#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,321 INFO L273 TraceCheckUtils]: 50: Hoare triple {14473#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,321 INFO L273 TraceCheckUtils]: 51: Hoare triple {14473#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,321 INFO L273 TraceCheckUtils]: 52: Hoare triple {14473#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,321 INFO L273 TraceCheckUtils]: 53: Hoare triple {14473#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,321 INFO L273 TraceCheckUtils]: 54: Hoare triple {14473#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,322 INFO L273 TraceCheckUtils]: 55: Hoare triple {14473#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,322 INFO L273 TraceCheckUtils]: 56: Hoare triple {14473#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,322 INFO L273 TraceCheckUtils]: 57: Hoare triple {14473#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,322 INFO L273 TraceCheckUtils]: 58: Hoare triple {14473#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,322 INFO L273 TraceCheckUtils]: 59: Hoare triple {14473#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,322 INFO L273 TraceCheckUtils]: 60: Hoare triple {14473#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,323 INFO L273 TraceCheckUtils]: 61: Hoare triple {14473#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,323 INFO L273 TraceCheckUtils]: 62: Hoare triple {14473#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,323 INFO L273 TraceCheckUtils]: 63: Hoare triple {14473#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,323 INFO L273 TraceCheckUtils]: 64: Hoare triple {14473#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,323 INFO L273 TraceCheckUtils]: 65: Hoare triple {14473#false} assume 8544 == #t~mem41;havoc #t~mem41; {14473#false} is VALID [2018-11-23 12:47:59,323 INFO L273 TraceCheckUtils]: 66: Hoare triple {14473#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,324 INFO L273 TraceCheckUtils]: 67: Hoare triple {14473#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,324 INFO L273 TraceCheckUtils]: 68: Hoare triple {14473#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {14473#false} is VALID [2018-11-23 12:47:59,324 INFO L273 TraceCheckUtils]: 69: Hoare triple {14473#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {14473#false} is VALID [2018-11-23 12:47:59,324 INFO L273 TraceCheckUtils]: 70: Hoare triple {14473#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {14473#false} is VALID [2018-11-23 12:47:59,324 INFO L273 TraceCheckUtils]: 71: Hoare triple {14473#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {14473#false} is VALID [2018-11-23 12:47:59,324 INFO L273 TraceCheckUtils]: 72: Hoare triple {14473#false} assume 7 == ~blastFlag~0; {14473#false} is VALID [2018-11-23 12:47:59,325 INFO L273 TraceCheckUtils]: 73: Hoare triple {14473#false} assume !false; {14473#false} is VALID [2018-11-23 12:47:59,330 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:47:59,330 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:47:59,330 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:47:59,331 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-23 12:47:59,331 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:47:59,331 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:47:59,416 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:47:59,417 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:47:59,417 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:47:59,417 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:47:59,418 INFO L87 Difference]: Start difference. First operand 194 states and 284 transitions. Second operand 4 states. [2018-11-23 12:48:00,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:00,327 INFO L93 Difference]: Finished difference Result 380 states and 562 transitions. [2018-11-23 12:48:00,327 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:00,327 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 74 [2018-11-23 12:48:00,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:00,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:00,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:48:00,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:00,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 464 transitions. [2018-11-23 12:48:00,336 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 464 transitions. [2018-11-23 12:48:00,879 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 464 edges. 464 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:00,883 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:48:00,883 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:48:00,884 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:00,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:48:00,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:48:00,997 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:00,997 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:48:00,997 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:48:00,997 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:48:01,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:01,002 INFO L93 Difference]: Finished difference Result 211 states and 305 transitions. [2018-11-23 12:48:01,002 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 305 transitions. [2018-11-23 12:48:01,002 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:01,002 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:01,003 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:48:01,003 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:48:01,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:01,007 INFO L93 Difference]: Finished difference Result 211 states and 305 transitions. [2018-11-23 12:48:01,007 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 305 transitions. [2018-11-23 12:48:01,038 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:01,038 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:01,038 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:01,039 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:01,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:48:01,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 283 transitions. [2018-11-23 12:48:01,045 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 283 transitions. Word has length 74 [2018-11-23 12:48:01,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:01,045 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 283 transitions. [2018-11-23 12:48:01,045 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:01,045 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 283 transitions. [2018-11-23 12:48:01,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2018-11-23 12:48:01,046 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:01,046 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:01,047 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:01,047 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:01,048 INFO L82 PathProgramCache]: Analyzing trace with hash -241218748, now seen corresponding path program 1 times [2018-11-23 12:48:01,048 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:01,048 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:01,049 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:01,049 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:01,049 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:01,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:01,306 INFO L256 TraceCheckUtils]: 0: Hoare triple {15575#true} call ULTIMATE.init(); {15575#true} is VALID [2018-11-23 12:48:01,307 INFO L273 TraceCheckUtils]: 1: Hoare triple {15575#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,307 INFO L273 TraceCheckUtils]: 2: Hoare triple {15575#true} assume true; {15575#true} is VALID [2018-11-23 12:48:01,308 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {15575#true} {15575#true} #633#return; {15575#true} is VALID [2018-11-23 12:48:01,308 INFO L256 TraceCheckUtils]: 4: Hoare triple {15575#true} call #t~ret138 := main(); {15575#true} is VALID [2018-11-23 12:48:01,308 INFO L273 TraceCheckUtils]: 5: Hoare triple {15575#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,308 INFO L256 TraceCheckUtils]: 6: Hoare triple {15575#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {15575#true} is VALID [2018-11-23 12:48:01,308 INFO L273 TraceCheckUtils]: 7: Hoare triple {15575#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 8: Hoare triple {15575#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 9: Hoare triple {15575#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 10: Hoare triple {15575#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 11: Hoare triple {15575#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 12: Hoare triple {15575#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 13: Hoare triple {15575#true} assume !false; {15575#true} is VALID [2018-11-23 12:48:01,309 INFO L273 TraceCheckUtils]: 14: Hoare triple {15575#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 15: Hoare triple {15575#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 16: Hoare triple {15575#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 17: Hoare triple {15575#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 18: Hoare triple {15575#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 19: Hoare triple {15575#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 20: Hoare triple {15575#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 21: Hoare triple {15575#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 22: Hoare triple {15575#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15575#true} is VALID [2018-11-23 12:48:01,310 INFO L273 TraceCheckUtils]: 23: Hoare triple {15575#true} assume 8464 == #t~mem32;havoc #t~mem32; {15575#true} is VALID [2018-11-23 12:48:01,311 INFO L273 TraceCheckUtils]: 24: Hoare triple {15575#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {15575#true} is VALID [2018-11-23 12:48:01,311 INFO L273 TraceCheckUtils]: 25: Hoare triple {15575#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {15575#true} is VALID [2018-11-23 12:48:01,312 INFO L273 TraceCheckUtils]: 26: Hoare triple {15575#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,312 INFO L273 TraceCheckUtils]: 27: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,313 INFO L273 TraceCheckUtils]: 28: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,313 INFO L273 TraceCheckUtils]: 29: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,313 INFO L273 TraceCheckUtils]: 30: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,313 INFO L273 TraceCheckUtils]: 31: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,314 INFO L273 TraceCheckUtils]: 32: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,315 INFO L273 TraceCheckUtils]: 33: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:01,315 INFO L273 TraceCheckUtils]: 34: Hoare triple {15577#(= (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15578#(= |ssl3_accept_#t~mem27| 8496)} is VALID [2018-11-23 12:48:01,316 INFO L273 TraceCheckUtils]: 35: Hoare triple {15578#(= |ssl3_accept_#t~mem27| 8496)} assume 24576 == #t~mem27;havoc #t~mem27; {15576#false} is VALID [2018-11-23 12:48:01,316 INFO L273 TraceCheckUtils]: 36: Hoare triple {15576#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,316 INFO L273 TraceCheckUtils]: 37: Hoare triple {15576#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {15576#false} is VALID [2018-11-23 12:48:01,317 INFO L273 TraceCheckUtils]: 38: Hoare triple {15576#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,317 INFO L273 TraceCheckUtils]: 39: Hoare triple {15576#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,317 INFO L273 TraceCheckUtils]: 40: Hoare triple {15576#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {15576#false} is VALID [2018-11-23 12:48:01,317 INFO L273 TraceCheckUtils]: 41: Hoare triple {15576#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,317 INFO L273 TraceCheckUtils]: 42: Hoare triple {15576#false} assume 12292 != #t~mem62;havoc #t~mem62; {15576#false} is VALID [2018-11-23 12:48:01,318 INFO L273 TraceCheckUtils]: 43: Hoare triple {15576#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {15576#false} is VALID [2018-11-23 12:48:01,318 INFO L273 TraceCheckUtils]: 44: Hoare triple {15576#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,318 INFO L273 TraceCheckUtils]: 45: Hoare triple {15576#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {15576#false} is VALID [2018-11-23 12:48:01,318 INFO L273 TraceCheckUtils]: 46: Hoare triple {15576#false} ~skip~0 := 0; {15576#false} is VALID [2018-11-23 12:48:01,318 INFO L273 TraceCheckUtils]: 47: Hoare triple {15576#false} assume !false; {15576#false} is VALID [2018-11-23 12:48:01,319 INFO L273 TraceCheckUtils]: 48: Hoare triple {15576#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,319 INFO L273 TraceCheckUtils]: 49: Hoare triple {15576#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,319 INFO L273 TraceCheckUtils]: 50: Hoare triple {15576#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,319 INFO L273 TraceCheckUtils]: 51: Hoare triple {15576#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,319 INFO L273 TraceCheckUtils]: 52: Hoare triple {15576#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,320 INFO L273 TraceCheckUtils]: 53: Hoare triple {15576#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,320 INFO L273 TraceCheckUtils]: 54: Hoare triple {15576#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,320 INFO L273 TraceCheckUtils]: 55: Hoare triple {15576#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,321 INFO L273 TraceCheckUtils]: 56: Hoare triple {15576#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,321 INFO L273 TraceCheckUtils]: 57: Hoare triple {15576#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,321 INFO L273 TraceCheckUtils]: 58: Hoare triple {15576#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,321 INFO L273 TraceCheckUtils]: 59: Hoare triple {15576#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,321 INFO L273 TraceCheckUtils]: 60: Hoare triple {15576#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,322 INFO L273 TraceCheckUtils]: 61: Hoare triple {15576#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,322 INFO L273 TraceCheckUtils]: 62: Hoare triple {15576#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,322 INFO L273 TraceCheckUtils]: 63: Hoare triple {15576#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,322 INFO L273 TraceCheckUtils]: 64: Hoare triple {15576#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,322 INFO L273 TraceCheckUtils]: 65: Hoare triple {15576#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,322 INFO L273 TraceCheckUtils]: 66: Hoare triple {15576#false} assume 8544 == #t~mem41;havoc #t~mem41; {15576#false} is VALID [2018-11-23 12:48:01,323 INFO L273 TraceCheckUtils]: 67: Hoare triple {15576#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,323 INFO L273 TraceCheckUtils]: 68: Hoare triple {15576#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,323 INFO L273 TraceCheckUtils]: 69: Hoare triple {15576#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {15576#false} is VALID [2018-11-23 12:48:01,323 INFO L273 TraceCheckUtils]: 70: Hoare triple {15576#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {15576#false} is VALID [2018-11-23 12:48:01,323 INFO L273 TraceCheckUtils]: 71: Hoare triple {15576#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {15576#false} is VALID [2018-11-23 12:48:01,324 INFO L273 TraceCheckUtils]: 72: Hoare triple {15576#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {15576#false} is VALID [2018-11-23 12:48:01,324 INFO L273 TraceCheckUtils]: 73: Hoare triple {15576#false} assume 7 == ~blastFlag~0; {15576#false} is VALID [2018-11-23 12:48:01,324 INFO L273 TraceCheckUtils]: 74: Hoare triple {15576#false} assume !false; {15576#false} is VALID [2018-11-23 12:48:01,328 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:48:01,328 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:01,328 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:01,329 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-23 12:48:01,329 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:01,329 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:01,441 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:01,441 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:01,442 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:01,442 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:01,442 INFO L87 Difference]: Start difference. First operand 194 states and 283 transitions. Second operand 4 states. [2018-11-23 12:48:02,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:02,640 INFO L93 Difference]: Finished difference Result 380 states and 560 transitions. [2018-11-23 12:48:02,640 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:02,640 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 75 [2018-11-23 12:48:02,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:02,641 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:02,643 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:48:02,643 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:02,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 463 transitions. [2018-11-23 12:48:02,645 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 463 transitions. [2018-11-23 12:48:03,093 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 463 edges. 463 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:03,097 INFO L225 Difference]: With dead ends: 380 [2018-11-23 12:48:03,097 INFO L226 Difference]: Without dead ends: 211 [2018-11-23 12:48:03,098 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:03,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2018-11-23 12:48:03,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 194. [2018-11-23 12:48:03,482 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:03,482 INFO L82 GeneralOperation]: Start isEquivalent. First operand 211 states. Second operand 194 states. [2018-11-23 12:48:03,482 INFO L74 IsIncluded]: Start isIncluded. First operand 211 states. Second operand 194 states. [2018-11-23 12:48:03,483 INFO L87 Difference]: Start difference. First operand 211 states. Second operand 194 states. [2018-11-23 12:48:03,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:03,487 INFO L93 Difference]: Finished difference Result 211 states and 304 transitions. [2018-11-23 12:48:03,487 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 304 transitions. [2018-11-23 12:48:03,488 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:03,488 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:03,488 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 211 states. [2018-11-23 12:48:03,488 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 211 states. [2018-11-23 12:48:03,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:03,492 INFO L93 Difference]: Finished difference Result 211 states and 304 transitions. [2018-11-23 12:48:03,492 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 304 transitions. [2018-11-23 12:48:03,493 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:03,493 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:03,493 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:03,493 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:03,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:48:03,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 282 transitions. [2018-11-23 12:48:03,497 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 282 transitions. Word has length 75 [2018-11-23 12:48:03,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:03,497 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 282 transitions. [2018-11-23 12:48:03,497 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:03,498 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 282 transitions. [2018-11-23 12:48:03,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2018-11-23 12:48:03,498 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:03,499 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:03,499 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:03,499 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:03,499 INFO L82 PathProgramCache]: Analyzing trace with hash 345081479, now seen corresponding path program 1 times [2018-11-23 12:48:03,499 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:03,499 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:03,501 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:03,501 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:03,501 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:03,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:03,719 INFO L256 TraceCheckUtils]: 0: Hoare triple {16680#true} call ULTIMATE.init(); {16680#true} is VALID [2018-11-23 12:48:03,720 INFO L273 TraceCheckUtils]: 1: Hoare triple {16680#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,720 INFO L273 TraceCheckUtils]: 2: Hoare triple {16680#true} assume true; {16680#true} is VALID [2018-11-23 12:48:03,720 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {16680#true} {16680#true} #633#return; {16680#true} is VALID [2018-11-23 12:48:03,720 INFO L256 TraceCheckUtils]: 4: Hoare triple {16680#true} call #t~ret138 := main(); {16680#true} is VALID [2018-11-23 12:48:03,721 INFO L273 TraceCheckUtils]: 5: Hoare triple {16680#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,721 INFO L256 TraceCheckUtils]: 6: Hoare triple {16680#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {16680#true} is VALID [2018-11-23 12:48:03,721 INFO L273 TraceCheckUtils]: 7: Hoare triple {16680#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,721 INFO L273 TraceCheckUtils]: 8: Hoare triple {16680#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {16680#true} is VALID [2018-11-23 12:48:03,721 INFO L273 TraceCheckUtils]: 9: Hoare triple {16680#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {16680#true} is VALID [2018-11-23 12:48:03,721 INFO L273 TraceCheckUtils]: 10: Hoare triple {16680#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 11: Hoare triple {16680#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 12: Hoare triple {16680#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 13: Hoare triple {16680#true} assume !false; {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 14: Hoare triple {16680#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 15: Hoare triple {16680#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 16: Hoare triple {16680#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 17: Hoare triple {16680#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,722 INFO L273 TraceCheckUtils]: 18: Hoare triple {16680#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 19: Hoare triple {16680#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 20: Hoare triple {16680#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 21: Hoare triple {16680#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 22: Hoare triple {16680#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 23: Hoare triple {16680#true} assume 8464 == #t~mem32;havoc #t~mem32; {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 24: Hoare triple {16680#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {16680#true} is VALID [2018-11-23 12:48:03,723 INFO L273 TraceCheckUtils]: 25: Hoare triple {16680#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {16680#true} is VALID [2018-11-23 12:48:03,724 INFO L273 TraceCheckUtils]: 26: Hoare triple {16680#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,725 INFO L273 TraceCheckUtils]: 27: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,725 INFO L273 TraceCheckUtils]: 28: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,725 INFO L273 TraceCheckUtils]: 29: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} ~skip~0 := 0; {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,726 INFO L273 TraceCheckUtils]: 30: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !false; {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,726 INFO L273 TraceCheckUtils]: 31: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,726 INFO L273 TraceCheckUtils]: 32: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,727 INFO L273 TraceCheckUtils]: 33: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,727 INFO L273 TraceCheckUtils]: 34: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} is VALID [2018-11-23 12:48:03,728 INFO L273 TraceCheckUtils]: 35: Hoare triple {16682#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16683#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem28| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} is VALID [2018-11-23 12:48:03,729 INFO L273 TraceCheckUtils]: 36: Hoare triple {16683#(and (= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 36) 1) (+ ssl3_accept_~s.offset 52)) 8496) (= |ssl3_accept_#t~mem28| (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52))))} assume 8195 == #t~mem28;havoc #t~mem28; {16681#false} is VALID [2018-11-23 12:48:03,729 INFO L273 TraceCheckUtils]: 37: Hoare triple {16681#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,729 INFO L273 TraceCheckUtils]: 38: Hoare triple {16681#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {16681#false} is VALID [2018-11-23 12:48:03,729 INFO L273 TraceCheckUtils]: 39: Hoare triple {16681#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,730 INFO L273 TraceCheckUtils]: 40: Hoare triple {16681#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,730 INFO L273 TraceCheckUtils]: 41: Hoare triple {16681#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {16681#false} is VALID [2018-11-23 12:48:03,730 INFO L273 TraceCheckUtils]: 42: Hoare triple {16681#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,730 INFO L273 TraceCheckUtils]: 43: Hoare triple {16681#false} assume 12292 != #t~mem62;havoc #t~mem62; {16681#false} is VALID [2018-11-23 12:48:03,730 INFO L273 TraceCheckUtils]: 44: Hoare triple {16681#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {16681#false} is VALID [2018-11-23 12:48:03,731 INFO L273 TraceCheckUtils]: 45: Hoare triple {16681#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,731 INFO L273 TraceCheckUtils]: 46: Hoare triple {16681#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {16681#false} is VALID [2018-11-23 12:48:03,731 INFO L273 TraceCheckUtils]: 47: Hoare triple {16681#false} ~skip~0 := 0; {16681#false} is VALID [2018-11-23 12:48:03,731 INFO L273 TraceCheckUtils]: 48: Hoare triple {16681#false} assume !false; {16681#false} is VALID [2018-11-23 12:48:03,731 INFO L273 TraceCheckUtils]: 49: Hoare triple {16681#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,731 INFO L273 TraceCheckUtils]: 50: Hoare triple {16681#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 51: Hoare triple {16681#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 52: Hoare triple {16681#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 53: Hoare triple {16681#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 54: Hoare triple {16681#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 55: Hoare triple {16681#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 56: Hoare triple {16681#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 57: Hoare triple {16681#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,732 INFO L273 TraceCheckUtils]: 58: Hoare triple {16681#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 59: Hoare triple {16681#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 60: Hoare triple {16681#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 61: Hoare triple {16681#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 62: Hoare triple {16681#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 63: Hoare triple {16681#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 64: Hoare triple {16681#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 65: Hoare triple {16681#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 66: Hoare triple {16681#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,733 INFO L273 TraceCheckUtils]: 67: Hoare triple {16681#false} assume 8544 == #t~mem41;havoc #t~mem41; {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 68: Hoare triple {16681#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 69: Hoare triple {16681#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 70: Hoare triple {16681#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 71: Hoare triple {16681#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 72: Hoare triple {16681#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 73: Hoare triple {16681#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 74: Hoare triple {16681#false} assume 7 == ~blastFlag~0; {16681#false} is VALID [2018-11-23 12:48:03,734 INFO L273 TraceCheckUtils]: 75: Hoare triple {16681#false} assume !false; {16681#false} is VALID [2018-11-23 12:48:03,739 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 12:48:03,739 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:03,739 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:03,740 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-23 12:48:03,740 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:03,740 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:03,819 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 76 edges. 76 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:03,819 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:03,820 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:03,820 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:03,820 INFO L87 Difference]: Start difference. First operand 194 states and 282 transitions. Second operand 4 states. [2018-11-23 12:48:04,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:04,701 INFO L93 Difference]: Finished difference Result 370 states and 546 transitions. [2018-11-23 12:48:04,701 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:04,701 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 76 [2018-11-23 12:48:04,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:04,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:04,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-23 12:48:04,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:04,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 450 transitions. [2018-11-23 12:48:04,706 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 450 transitions. [2018-11-23 12:48:05,151 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 450 edges. 450 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:05,155 INFO L225 Difference]: With dead ends: 370 [2018-11-23 12:48:05,155 INFO L226 Difference]: Without dead ends: 201 [2018-11-23 12:48:05,155 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:05,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2018-11-23 12:48:05,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 194. [2018-11-23 12:48:05,259 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:05,260 INFO L82 GeneralOperation]: Start isEquivalent. First operand 201 states. Second operand 194 states. [2018-11-23 12:48:05,260 INFO L74 IsIncluded]: Start isIncluded. First operand 201 states. Second operand 194 states. [2018-11-23 12:48:05,260 INFO L87 Difference]: Start difference. First operand 201 states. Second operand 194 states. [2018-11-23 12:48:05,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:05,264 INFO L93 Difference]: Finished difference Result 201 states and 291 transitions. [2018-11-23 12:48:05,264 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 291 transitions. [2018-11-23 12:48:05,264 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:05,264 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:05,264 INFO L74 IsIncluded]: Start isIncluded. First operand 194 states. Second operand 201 states. [2018-11-23 12:48:05,264 INFO L87 Difference]: Start difference. First operand 194 states. Second operand 201 states. [2018-11-23 12:48:05,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:05,268 INFO L93 Difference]: Finished difference Result 201 states and 291 transitions. [2018-11-23 12:48:05,268 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 291 transitions. [2018-11-23 12:48:05,268 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:05,268 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:05,268 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:05,268 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:05,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 194 states. [2018-11-23 12:48:05,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 194 states to 194 states and 281 transitions. [2018-11-23 12:48:05,273 INFO L78 Accepts]: Start accepts. Automaton has 194 states and 281 transitions. Word has length 76 [2018-11-23 12:48:05,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:05,273 INFO L480 AbstractCegarLoop]: Abstraction has 194 states and 281 transitions. [2018-11-23 12:48:05,273 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:05,273 INFO L276 IsEmpty]: Start isEmpty. Operand 194 states and 281 transitions. [2018-11-23 12:48:05,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 12:48:05,274 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:05,274 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:05,274 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:05,274 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:05,275 INFO L82 PathProgramCache]: Analyzing trace with hash 1440674399, now seen corresponding path program 1 times [2018-11-23 12:48:05,275 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:05,275 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:05,276 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:05,276 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:05,276 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:05,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:05,943 INFO L256 TraceCheckUtils]: 0: Hoare triple {17752#true} call ULTIMATE.init(); {17752#true} is VALID [2018-11-23 12:48:05,944 INFO L273 TraceCheckUtils]: 1: Hoare triple {17752#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,944 INFO L273 TraceCheckUtils]: 2: Hoare triple {17752#true} assume true; {17752#true} is VALID [2018-11-23 12:48:05,944 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {17752#true} {17752#true} #633#return; {17752#true} is VALID [2018-11-23 12:48:05,944 INFO L256 TraceCheckUtils]: 4: Hoare triple {17752#true} call #t~ret138 := main(); {17752#true} is VALID [2018-11-23 12:48:05,944 INFO L273 TraceCheckUtils]: 5: Hoare triple {17752#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,944 INFO L256 TraceCheckUtils]: 6: Hoare triple {17752#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 7: Hoare triple {17752#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 8: Hoare triple {17752#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 9: Hoare triple {17752#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 10: Hoare triple {17752#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 11: Hoare triple {17752#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 12: Hoare triple {17752#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 13: Hoare triple {17752#true} assume !false; {17752#true} is VALID [2018-11-23 12:48:05,945 INFO L273 TraceCheckUtils]: 14: Hoare triple {17752#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 15: Hoare triple {17752#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 16: Hoare triple {17752#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 17: Hoare triple {17752#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 18: Hoare triple {17752#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 19: Hoare triple {17752#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 20: Hoare triple {17752#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 21: Hoare triple {17752#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,946 INFO L273 TraceCheckUtils]: 22: Hoare triple {17752#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 23: Hoare triple {17752#true} assume 8464 == #t~mem32;havoc #t~mem32; {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 24: Hoare triple {17752#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 25: Hoare triple {17752#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 26: Hoare triple {17752#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 27: Hoare triple {17752#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 28: Hoare triple {17752#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 29: Hoare triple {17752#true} ~skip~0 := 0; {17752#true} is VALID [2018-11-23 12:48:05,947 INFO L273 TraceCheckUtils]: 30: Hoare triple {17752#true} assume !false; {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 31: Hoare triple {17752#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 32: Hoare triple {17752#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 33: Hoare triple {17752#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 34: Hoare triple {17752#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 35: Hoare triple {17752#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 36: Hoare triple {17752#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 37: Hoare triple {17752#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,948 INFO L273 TraceCheckUtils]: 38: Hoare triple {17752#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 39: Hoare triple {17752#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 40: Hoare triple {17752#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 41: Hoare triple {17752#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 42: Hoare triple {17752#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 43: Hoare triple {17752#true} assume 8496 == #t~mem35;havoc #t~mem35; {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 44: Hoare triple {17752#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 45: Hoare triple {17752#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {17752#true} is VALID [2018-11-23 12:48:05,949 INFO L273 TraceCheckUtils]: 46: Hoare triple {17752#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {17752#true} is VALID [2018-11-23 12:48:05,950 INFO L273 TraceCheckUtils]: 47: Hoare triple {17752#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,951 INFO L273 TraceCheckUtils]: 48: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,952 INFO L273 TraceCheckUtils]: 49: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,952 INFO L273 TraceCheckUtils]: 50: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,952 INFO L273 TraceCheckUtils]: 51: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,953 INFO L273 TraceCheckUtils]: 52: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,953 INFO L273 TraceCheckUtils]: 53: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,953 INFO L273 TraceCheckUtils]: 54: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,954 INFO L273 TraceCheckUtils]: 55: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,954 INFO L273 TraceCheckUtils]: 56: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,955 INFO L273 TraceCheckUtils]: 57: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,955 INFO L273 TraceCheckUtils]: 58: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,956 INFO L273 TraceCheckUtils]: 59: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,957 INFO L273 TraceCheckUtils]: 60: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,957 INFO L273 TraceCheckUtils]: 61: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,958 INFO L273 TraceCheckUtils]: 62: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,958 INFO L273 TraceCheckUtils]: 63: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,959 INFO L273 TraceCheckUtils]: 64: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,976 INFO L273 TraceCheckUtils]: 65: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,985 INFO L273 TraceCheckUtils]: 66: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,996 INFO L273 TraceCheckUtils]: 67: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,997 INFO L273 TraceCheckUtils]: 68: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,997 INFO L273 TraceCheckUtils]: 69: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:05,998 INFO L273 TraceCheckUtils]: 70: Hoare triple {17754#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {17755#(= 8656 |ssl3_accept_#t~mem41|)} is VALID [2018-11-23 12:48:05,998 INFO L273 TraceCheckUtils]: 71: Hoare triple {17755#(= 8656 |ssl3_accept_#t~mem41|)} assume 8544 == #t~mem41;havoc #t~mem41; {17753#false} is VALID [2018-11-23 12:48:05,998 INFO L273 TraceCheckUtils]: 72: Hoare triple {17753#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {17753#false} is VALID [2018-11-23 12:48:05,998 INFO L273 TraceCheckUtils]: 73: Hoare triple {17753#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {17753#false} is VALID [2018-11-23 12:48:05,998 INFO L273 TraceCheckUtils]: 74: Hoare triple {17753#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {17753#false} is VALID [2018-11-23 12:48:05,998 INFO L273 TraceCheckUtils]: 75: Hoare triple {17753#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {17753#false} is VALID [2018-11-23 12:48:05,999 INFO L273 TraceCheckUtils]: 76: Hoare triple {17753#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {17753#false} is VALID [2018-11-23 12:48:05,999 INFO L273 TraceCheckUtils]: 77: Hoare triple {17753#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {17753#false} is VALID [2018-11-23 12:48:05,999 INFO L273 TraceCheckUtils]: 78: Hoare triple {17753#false} assume 7 == ~blastFlag~0; {17753#false} is VALID [2018-11-23 12:48:05,999 INFO L273 TraceCheckUtils]: 79: Hoare triple {17753#false} assume !false; {17753#false} is VALID [2018-11-23 12:48:06,006 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:06,006 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:06,006 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:06,006 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:48:06,007 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:06,007 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:06,084 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:06,084 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:06,085 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:06,085 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:06,085 INFO L87 Difference]: Start difference. First operand 194 states and 281 transitions. Second operand 4 states. [2018-11-23 12:48:07,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:07,865 INFO L93 Difference]: Finished difference Result 469 states and 696 transitions. [2018-11-23 12:48:07,865 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:07,865 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:48:07,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:07,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:07,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 571 transitions. [2018-11-23 12:48:07,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:07,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 571 transitions. [2018-11-23 12:48:07,871 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 571 transitions. [2018-11-23 12:48:08,464 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 571 edges. 571 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:08,470 INFO L225 Difference]: With dead ends: 469 [2018-11-23 12:48:08,470 INFO L226 Difference]: Without dead ends: 300 [2018-11-23 12:48:08,471 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:08,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2018-11-23 12:48:08,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 224. [2018-11-23 12:48:08,636 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:08,636 INFO L82 GeneralOperation]: Start isEquivalent. First operand 300 states. Second operand 224 states. [2018-11-23 12:48:08,637 INFO L74 IsIncluded]: Start isIncluded. First operand 300 states. Second operand 224 states. [2018-11-23 12:48:08,637 INFO L87 Difference]: Start difference. First operand 300 states. Second operand 224 states. [2018-11-23 12:48:08,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:08,642 INFO L93 Difference]: Finished difference Result 300 states and 442 transitions. [2018-11-23 12:48:08,642 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 442 transitions. [2018-11-23 12:48:08,642 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:08,643 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:08,643 INFO L74 IsIncluded]: Start isIncluded. First operand 224 states. Second operand 300 states. [2018-11-23 12:48:08,643 INFO L87 Difference]: Start difference. First operand 224 states. Second operand 300 states. [2018-11-23 12:48:08,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:08,650 INFO L93 Difference]: Finished difference Result 300 states and 442 transitions. [2018-11-23 12:48:08,650 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 442 transitions. [2018-11-23 12:48:08,650 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:08,651 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:08,651 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:08,651 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:08,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 224 states. [2018-11-23 12:48:08,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 332 transitions. [2018-11-23 12:48:08,656 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 332 transitions. Word has length 80 [2018-11-23 12:48:08,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:08,656 INFO L480 AbstractCegarLoop]: Abstraction has 224 states and 332 transitions. [2018-11-23 12:48:08,656 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:08,656 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 332 transitions. [2018-11-23 12:48:08,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-11-23 12:48:08,657 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:08,657 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:08,658 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:08,658 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:08,658 INFO L82 PathProgramCache]: Analyzing trace with hash 1368287841, now seen corresponding path program 1 times [2018-11-23 12:48:08,658 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:08,658 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:08,659 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:08,659 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:08,659 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:08,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:09,290 INFO L256 TraceCheckUtils]: 0: Hoare triple {19174#true} call ULTIMATE.init(); {19174#true} is VALID [2018-11-23 12:48:09,290 INFO L273 TraceCheckUtils]: 1: Hoare triple {19174#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,290 INFO L273 TraceCheckUtils]: 2: Hoare triple {19174#true} assume true; {19174#true} is VALID [2018-11-23 12:48:09,290 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {19174#true} {19174#true} #633#return; {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L256 TraceCheckUtils]: 4: Hoare triple {19174#true} call #t~ret138 := main(); {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L273 TraceCheckUtils]: 5: Hoare triple {19174#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L256 TraceCheckUtils]: 6: Hoare triple {19174#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L273 TraceCheckUtils]: 7: Hoare triple {19174#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L273 TraceCheckUtils]: 8: Hoare triple {19174#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L273 TraceCheckUtils]: 9: Hoare triple {19174#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L273 TraceCheckUtils]: 10: Hoare triple {19174#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {19174#true} is VALID [2018-11-23 12:48:09,291 INFO L273 TraceCheckUtils]: 11: Hoare triple {19174#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 12: Hoare triple {19174#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 13: Hoare triple {19174#true} assume !false; {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 14: Hoare triple {19174#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 15: Hoare triple {19174#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 16: Hoare triple {19174#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 17: Hoare triple {19174#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 18: Hoare triple {19174#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,292 INFO L273 TraceCheckUtils]: 19: Hoare triple {19174#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 20: Hoare triple {19174#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 21: Hoare triple {19174#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 22: Hoare triple {19174#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 23: Hoare triple {19174#true} assume 8464 == #t~mem32;havoc #t~mem32; {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 24: Hoare triple {19174#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 25: Hoare triple {19174#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 26: Hoare triple {19174#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 27: Hoare triple {19174#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,293 INFO L273 TraceCheckUtils]: 28: Hoare triple {19174#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 29: Hoare triple {19174#true} ~skip~0 := 0; {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 30: Hoare triple {19174#true} assume !false; {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 31: Hoare triple {19174#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 32: Hoare triple {19174#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 33: Hoare triple {19174#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 34: Hoare triple {19174#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 35: Hoare triple {19174#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,294 INFO L273 TraceCheckUtils]: 36: Hoare triple {19174#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 37: Hoare triple {19174#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 38: Hoare triple {19174#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 39: Hoare triple {19174#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 40: Hoare triple {19174#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 41: Hoare triple {19174#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 42: Hoare triple {19174#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 43: Hoare triple {19174#true} assume 8496 == #t~mem35;havoc #t~mem35; {19174#true} is VALID [2018-11-23 12:48:09,295 INFO L273 TraceCheckUtils]: 44: Hoare triple {19174#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {19174#true} is VALID [2018-11-23 12:48:09,296 INFO L273 TraceCheckUtils]: 45: Hoare triple {19174#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {19174#true} is VALID [2018-11-23 12:48:09,296 INFO L273 TraceCheckUtils]: 46: Hoare triple {19174#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {19174#true} is VALID [2018-11-23 12:48:09,297 INFO L273 TraceCheckUtils]: 47: Hoare triple {19174#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,298 INFO L273 TraceCheckUtils]: 48: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,298 INFO L273 TraceCheckUtils]: 49: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,301 INFO L273 TraceCheckUtils]: 50: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,301 INFO L273 TraceCheckUtils]: 51: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,301 INFO L273 TraceCheckUtils]: 52: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,302 INFO L273 TraceCheckUtils]: 53: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,302 INFO L273 TraceCheckUtils]: 54: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,302 INFO L273 TraceCheckUtils]: 55: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,303 INFO L273 TraceCheckUtils]: 56: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,303 INFO L273 TraceCheckUtils]: 57: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,303 INFO L273 TraceCheckUtils]: 58: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,303 INFO L273 TraceCheckUtils]: 59: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,304 INFO L273 TraceCheckUtils]: 60: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,304 INFO L273 TraceCheckUtils]: 61: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,304 INFO L273 TraceCheckUtils]: 62: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,305 INFO L273 TraceCheckUtils]: 63: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,305 INFO L273 TraceCheckUtils]: 64: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,305 INFO L273 TraceCheckUtils]: 65: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:09,306 INFO L273 TraceCheckUtils]: 66: Hoare triple {19176#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {19177#(= 8512 |ssl3_accept_#t~mem37|)} is VALID [2018-11-23 12:48:09,306 INFO L273 TraceCheckUtils]: 67: Hoare triple {19177#(= 8512 |ssl3_accept_#t~mem37|)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,307 INFO L273 TraceCheckUtils]: 68: Hoare triple {19175#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,307 INFO L273 TraceCheckUtils]: 69: Hoare triple {19175#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,307 INFO L273 TraceCheckUtils]: 70: Hoare triple {19175#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,307 INFO L273 TraceCheckUtils]: 71: Hoare triple {19175#false} assume 8544 == #t~mem41;havoc #t~mem41; {19175#false} is VALID [2018-11-23 12:48:09,307 INFO L273 TraceCheckUtils]: 72: Hoare triple {19175#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,308 INFO L273 TraceCheckUtils]: 73: Hoare triple {19175#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,308 INFO L273 TraceCheckUtils]: 74: Hoare triple {19175#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {19175#false} is VALID [2018-11-23 12:48:09,308 INFO L273 TraceCheckUtils]: 75: Hoare triple {19175#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {19175#false} is VALID [2018-11-23 12:48:09,308 INFO L273 TraceCheckUtils]: 76: Hoare triple {19175#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {19175#false} is VALID [2018-11-23 12:48:09,309 INFO L273 TraceCheckUtils]: 77: Hoare triple {19175#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {19175#false} is VALID [2018-11-23 12:48:09,309 INFO L273 TraceCheckUtils]: 78: Hoare triple {19175#false} assume 7 == ~blastFlag~0; {19175#false} is VALID [2018-11-23 12:48:09,309 INFO L273 TraceCheckUtils]: 79: Hoare triple {19175#false} assume !false; {19175#false} is VALID [2018-11-23 12:48:09,316 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:09,316 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:09,316 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:09,316 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:48:09,316 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:09,317 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:09,392 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 70 edges. 70 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:09,393 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:09,393 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:09,393 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:09,393 INFO L87 Difference]: Start difference. First operand 224 states and 332 transitions. Second operand 4 states. [2018-11-23 12:48:10,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:10,698 INFO L93 Difference]: Finished difference Result 472 states and 710 transitions. [2018-11-23 12:48:10,698 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:10,699 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 80 [2018-11-23 12:48:10,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:10,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:10,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 484 transitions. [2018-11-23 12:48:10,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:10,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 484 transitions. [2018-11-23 12:48:10,703 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 484 transitions. [2018-11-23 12:48:11,183 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 484 edges. 484 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:11,189 INFO L225 Difference]: With dead ends: 472 [2018-11-23 12:48:11,189 INFO L226 Difference]: Without dead ends: 273 [2018-11-23 12:48:11,190 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:11,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2018-11-23 12:48:11,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 248. [2018-11-23 12:48:11,319 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:11,319 INFO L82 GeneralOperation]: Start isEquivalent. First operand 273 states. Second operand 248 states. [2018-11-23 12:48:11,319 INFO L74 IsIncluded]: Start isIncluded. First operand 273 states. Second operand 248 states. [2018-11-23 12:48:11,320 INFO L87 Difference]: Start difference. First operand 273 states. Second operand 248 states. [2018-11-23 12:48:11,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:11,325 INFO L93 Difference]: Finished difference Result 273 states and 405 transitions. [2018-11-23 12:48:11,325 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 405 transitions. [2018-11-23 12:48:11,325 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:11,325 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:11,325 INFO L74 IsIncluded]: Start isIncluded. First operand 248 states. Second operand 273 states. [2018-11-23 12:48:11,325 INFO L87 Difference]: Start difference. First operand 248 states. Second operand 273 states. [2018-11-23 12:48:11,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:11,331 INFO L93 Difference]: Finished difference Result 273 states and 405 transitions. [2018-11-23 12:48:11,332 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 405 transitions. [2018-11-23 12:48:11,332 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:11,332 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:11,332 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:11,333 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:11,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 248 states. [2018-11-23 12:48:11,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 373 transitions. [2018-11-23 12:48:11,338 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 373 transitions. Word has length 80 [2018-11-23 12:48:11,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:11,338 INFO L480 AbstractCegarLoop]: Abstraction has 248 states and 373 transitions. [2018-11-23 12:48:11,339 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:11,339 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 373 transitions. [2018-11-23 12:48:11,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 12:48:11,340 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:11,340 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:11,340 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:11,340 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:11,340 INFO L82 PathProgramCache]: Analyzing trace with hash -2002550352, now seen corresponding path program 1 times [2018-11-23 12:48:11,341 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:11,341 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:11,341 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:11,342 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:11,342 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:11,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:11,900 INFO L256 TraceCheckUtils]: 0: Hoare triple {20562#true} call ULTIMATE.init(); {20562#true} is VALID [2018-11-23 12:48:11,900 INFO L273 TraceCheckUtils]: 1: Hoare triple {20562#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,900 INFO L273 TraceCheckUtils]: 2: Hoare triple {20562#true} assume true; {20562#true} is VALID [2018-11-23 12:48:11,900 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {20562#true} {20562#true} #633#return; {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L256 TraceCheckUtils]: 4: Hoare triple {20562#true} call #t~ret138 := main(); {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L273 TraceCheckUtils]: 5: Hoare triple {20562#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L256 TraceCheckUtils]: 6: Hoare triple {20562#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L273 TraceCheckUtils]: 7: Hoare triple {20562#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L273 TraceCheckUtils]: 8: Hoare triple {20562#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L273 TraceCheckUtils]: 9: Hoare triple {20562#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {20562#true} is VALID [2018-11-23 12:48:11,901 INFO L273 TraceCheckUtils]: 10: Hoare triple {20562#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 11: Hoare triple {20562#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 12: Hoare triple {20562#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 13: Hoare triple {20562#true} assume !false; {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 14: Hoare triple {20562#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 15: Hoare triple {20562#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 16: Hoare triple {20562#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 17: Hoare triple {20562#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 18: Hoare triple {20562#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,902 INFO L273 TraceCheckUtils]: 19: Hoare triple {20562#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 20: Hoare triple {20562#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 21: Hoare triple {20562#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 22: Hoare triple {20562#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 23: Hoare triple {20562#true} assume 8464 == #t~mem32;havoc #t~mem32; {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 24: Hoare triple {20562#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 25: Hoare triple {20562#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 26: Hoare triple {20562#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,903 INFO L273 TraceCheckUtils]: 27: Hoare triple {20562#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,904 INFO L273 TraceCheckUtils]: 28: Hoare triple {20562#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20562#true} is VALID [2018-11-23 12:48:11,904 INFO L273 TraceCheckUtils]: 29: Hoare triple {20562#true} ~skip~0 := 0; {20562#true} is VALID [2018-11-23 12:48:11,904 INFO L273 TraceCheckUtils]: 30: Hoare triple {20562#true} assume !false; {20562#true} is VALID [2018-11-23 12:48:11,904 INFO L273 TraceCheckUtils]: 31: Hoare triple {20562#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,904 INFO L273 TraceCheckUtils]: 32: Hoare triple {20562#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 33: Hoare triple {20562#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 34: Hoare triple {20562#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 35: Hoare triple {20562#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 36: Hoare triple {20562#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 37: Hoare triple {20562#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 38: Hoare triple {20562#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 39: Hoare triple {20562#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,905 INFO L273 TraceCheckUtils]: 40: Hoare triple {20562#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,906 INFO L273 TraceCheckUtils]: 41: Hoare triple {20562#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,906 INFO L273 TraceCheckUtils]: 42: Hoare triple {20562#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,906 INFO L273 TraceCheckUtils]: 43: Hoare triple {20562#true} assume 8496 == #t~mem35;havoc #t~mem35; {20562#true} is VALID [2018-11-23 12:48:11,906 INFO L273 TraceCheckUtils]: 44: Hoare triple {20562#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {20562#true} is VALID [2018-11-23 12:48:11,906 INFO L273 TraceCheckUtils]: 45: Hoare triple {20562#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {20562#true} is VALID [2018-11-23 12:48:11,906 INFO L273 TraceCheckUtils]: 46: Hoare triple {20562#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {20562#true} is VALID [2018-11-23 12:48:11,911 INFO L273 TraceCheckUtils]: 47: Hoare triple {20562#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,912 INFO L273 TraceCheckUtils]: 48: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,914 INFO L273 TraceCheckUtils]: 49: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,914 INFO L273 TraceCheckUtils]: 50: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,916 INFO L273 TraceCheckUtils]: 51: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,916 INFO L273 TraceCheckUtils]: 52: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,919 INFO L273 TraceCheckUtils]: 53: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,919 INFO L273 TraceCheckUtils]: 54: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,921 INFO L273 TraceCheckUtils]: 55: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,921 INFO L273 TraceCheckUtils]: 56: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,923 INFO L273 TraceCheckUtils]: 57: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,925 INFO L273 TraceCheckUtils]: 58: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,925 INFO L273 TraceCheckUtils]: 59: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,927 INFO L273 TraceCheckUtils]: 60: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,927 INFO L273 TraceCheckUtils]: 61: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,930 INFO L273 TraceCheckUtils]: 62: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,930 INFO L273 TraceCheckUtils]: 63: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,932 INFO L273 TraceCheckUtils]: 64: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,932 INFO L273 TraceCheckUtils]: 65: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,935 INFO L273 TraceCheckUtils]: 66: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,935 INFO L273 TraceCheckUtils]: 67: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 68: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,938 INFO L273 TraceCheckUtils]: 69: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 70: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:11,941 INFO L273 TraceCheckUtils]: 71: Hoare triple {20564#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {20565#(= 8656 |ssl3_accept_#t~mem42|)} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 72: Hoare triple {20565#(= 8656 |ssl3_accept_#t~mem42|)} assume 8545 == #t~mem42;havoc #t~mem42; {20563#false} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 73: Hoare triple {20563#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {20563#false} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 74: Hoare triple {20563#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {20563#false} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 75: Hoare triple {20563#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {20563#false} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 76: Hoare triple {20563#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {20563#false} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 77: Hoare triple {20563#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {20563#false} is VALID [2018-11-23 12:48:11,943 INFO L273 TraceCheckUtils]: 78: Hoare triple {20563#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {20563#false} is VALID [2018-11-23 12:48:11,944 INFO L273 TraceCheckUtils]: 79: Hoare triple {20563#false} assume 7 == ~blastFlag~0; {20563#false} is VALID [2018-11-23 12:48:11,944 INFO L273 TraceCheckUtils]: 80: Hoare triple {20563#false} assume !false; {20563#false} is VALID [2018-11-23 12:48:11,951 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:11,951 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:11,951 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:11,951 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:48:11,952 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:11,952 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:12,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:12,064 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:12,064 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:12,064 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:12,065 INFO L87 Difference]: Start difference. First operand 248 states and 373 transitions. Second operand 4 states. [2018-11-23 12:48:13,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:13,476 INFO L93 Difference]: Finished difference Result 539 states and 815 transitions. [2018-11-23 12:48:13,476 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:13,476 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 12:48:13,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:13,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:13,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 557 transitions. [2018-11-23 12:48:13,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:13,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 557 transitions. [2018-11-23 12:48:13,482 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 557 transitions. [2018-11-23 12:48:14,049 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 557 edges. 557 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:14,056 INFO L225 Difference]: With dead ends: 539 [2018-11-23 12:48:14,056 INFO L226 Difference]: Without dead ends: 316 [2018-11-23 12:48:14,056 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:14,057 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2018-11-23 12:48:14,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 249. [2018-11-23 12:48:14,174 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:14,174 INFO L82 GeneralOperation]: Start isEquivalent. First operand 316 states. Second operand 249 states. [2018-11-23 12:48:14,174 INFO L74 IsIncluded]: Start isIncluded. First operand 316 states. Second operand 249 states. [2018-11-23 12:48:14,174 INFO L87 Difference]: Start difference. First operand 316 states. Second operand 249 states. [2018-11-23 12:48:14,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:14,180 INFO L93 Difference]: Finished difference Result 316 states and 469 transitions. [2018-11-23 12:48:14,180 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 469 transitions. [2018-11-23 12:48:14,180 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:14,180 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:14,180 INFO L74 IsIncluded]: Start isIncluded. First operand 249 states. Second operand 316 states. [2018-11-23 12:48:14,180 INFO L87 Difference]: Start difference. First operand 249 states. Second operand 316 states. [2018-11-23 12:48:14,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:14,187 INFO L93 Difference]: Finished difference Result 316 states and 469 transitions. [2018-11-23 12:48:14,188 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 469 transitions. [2018-11-23 12:48:14,188 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:14,188 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:14,188 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:14,189 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:14,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 249 states. [2018-11-23 12:48:14,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 374 transitions. [2018-11-23 12:48:14,194 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 374 transitions. Word has length 81 [2018-11-23 12:48:14,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:14,194 INFO L480 AbstractCegarLoop]: Abstraction has 249 states and 374 transitions. [2018-11-23 12:48:14,194 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:14,195 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 374 transitions. [2018-11-23 12:48:14,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 12:48:14,196 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:14,196 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:14,196 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:14,196 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:14,196 INFO L82 PathProgramCache]: Analyzing trace with hash 323004382, now seen corresponding path program 1 times [2018-11-23 12:48:14,196 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:14,197 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:14,197 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:14,198 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:14,198 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:14,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:14,773 INFO L256 TraceCheckUtils]: 0: Hoare triple {22116#true} call ULTIMATE.init(); {22116#true} is VALID [2018-11-23 12:48:14,773 INFO L273 TraceCheckUtils]: 1: Hoare triple {22116#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,773 INFO L273 TraceCheckUtils]: 2: Hoare triple {22116#true} assume true; {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {22116#true} {22116#true} #633#return; {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L256 TraceCheckUtils]: 4: Hoare triple {22116#true} call #t~ret138 := main(); {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L273 TraceCheckUtils]: 5: Hoare triple {22116#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L256 TraceCheckUtils]: 6: Hoare triple {22116#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L273 TraceCheckUtils]: 7: Hoare triple {22116#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L273 TraceCheckUtils]: 8: Hoare triple {22116#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L273 TraceCheckUtils]: 9: Hoare triple {22116#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {22116#true} is VALID [2018-11-23 12:48:14,774 INFO L273 TraceCheckUtils]: 10: Hoare triple {22116#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 11: Hoare triple {22116#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 12: Hoare triple {22116#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 13: Hoare triple {22116#true} assume !false; {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 14: Hoare triple {22116#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 15: Hoare triple {22116#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 16: Hoare triple {22116#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 17: Hoare triple {22116#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,775 INFO L273 TraceCheckUtils]: 18: Hoare triple {22116#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 19: Hoare triple {22116#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 20: Hoare triple {22116#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 21: Hoare triple {22116#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 22: Hoare triple {22116#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 23: Hoare triple {22116#true} assume 8464 == #t~mem32;havoc #t~mem32; {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 24: Hoare triple {22116#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 25: Hoare triple {22116#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {22116#true} is VALID [2018-11-23 12:48:14,776 INFO L273 TraceCheckUtils]: 26: Hoare triple {22116#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 27: Hoare triple {22116#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 28: Hoare triple {22116#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 29: Hoare triple {22116#true} ~skip~0 := 0; {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 30: Hoare triple {22116#true} assume !false; {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 31: Hoare triple {22116#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 32: Hoare triple {22116#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 33: Hoare triple {22116#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 34: Hoare triple {22116#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,777 INFO L273 TraceCheckUtils]: 35: Hoare triple {22116#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,778 INFO L273 TraceCheckUtils]: 36: Hoare triple {22116#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,778 INFO L273 TraceCheckUtils]: 37: Hoare triple {22116#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,778 INFO L273 TraceCheckUtils]: 38: Hoare triple {22116#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 39: Hoare triple {22116#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 40: Hoare triple {22116#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 41: Hoare triple {22116#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 42: Hoare triple {22116#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 43: Hoare triple {22116#true} assume 8496 == #t~mem35;havoc #t~mem35; {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 44: Hoare triple {22116#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 45: Hoare triple {22116#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {22116#true} is VALID [2018-11-23 12:48:14,779 INFO L273 TraceCheckUtils]: 46: Hoare triple {22116#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {22116#true} is VALID [2018-11-23 12:48:14,797 INFO L273 TraceCheckUtils]: 47: Hoare triple {22116#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,798 INFO L273 TraceCheckUtils]: 48: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,801 INFO L273 TraceCheckUtils]: 49: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,802 INFO L273 TraceCheckUtils]: 50: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,807 INFO L273 TraceCheckUtils]: 51: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,807 INFO L273 TraceCheckUtils]: 52: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,808 INFO L273 TraceCheckUtils]: 53: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,808 INFO L273 TraceCheckUtils]: 54: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,808 INFO L273 TraceCheckUtils]: 55: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,809 INFO L273 TraceCheckUtils]: 56: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,809 INFO L273 TraceCheckUtils]: 57: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,809 INFO L273 TraceCheckUtils]: 58: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,810 INFO L273 TraceCheckUtils]: 59: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,810 INFO L273 TraceCheckUtils]: 60: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,810 INFO L273 TraceCheckUtils]: 61: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,811 INFO L273 TraceCheckUtils]: 62: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,811 INFO L273 TraceCheckUtils]: 63: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,812 INFO L273 TraceCheckUtils]: 64: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,812 INFO L273 TraceCheckUtils]: 65: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,813 INFO L273 TraceCheckUtils]: 66: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,813 INFO L273 TraceCheckUtils]: 67: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,814 INFO L273 TraceCheckUtils]: 68: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,815 INFO L273 TraceCheckUtils]: 69: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,815 INFO L273 TraceCheckUtils]: 70: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,816 INFO L273 TraceCheckUtils]: 71: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,816 INFO L273 TraceCheckUtils]: 72: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,817 INFO L273 TraceCheckUtils]: 73: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,817 INFO L273 TraceCheckUtils]: 74: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,818 INFO L273 TraceCheckUtils]: 75: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,818 INFO L273 TraceCheckUtils]: 76: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,819 INFO L273 TraceCheckUtils]: 77: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,820 INFO L273 TraceCheckUtils]: 78: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,820 INFO L273 TraceCheckUtils]: 79: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,821 INFO L273 TraceCheckUtils]: 80: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:14,822 INFO L273 TraceCheckUtils]: 81: Hoare triple {22118#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {22119#(= 8656 |ssl3_accept_#t~mem52|)} is VALID [2018-11-23 12:48:14,822 INFO L273 TraceCheckUtils]: 82: Hoare triple {22119#(= 8656 |ssl3_accept_#t~mem52|)} assume 8640 == #t~mem52;havoc #t~mem52; {22117#false} is VALID [2018-11-23 12:48:14,823 INFO L273 TraceCheckUtils]: 83: Hoare triple {22117#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {22117#false} is VALID [2018-11-23 12:48:14,823 INFO L273 TraceCheckUtils]: 84: Hoare triple {22117#false} assume !(4 == ~blastFlag~0); {22117#false} is VALID [2018-11-23 12:48:14,823 INFO L273 TraceCheckUtils]: 85: Hoare triple {22117#false} assume 5 == ~blastFlag~0; {22117#false} is VALID [2018-11-23 12:48:14,823 INFO L273 TraceCheckUtils]: 86: Hoare triple {22117#false} assume !false; {22117#false} is VALID [2018-11-23 12:48:14,834 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:14,834 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:14,834 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:14,835 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 12:48:14,835 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:14,835 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:14,930 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:14,931 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:14,931 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:14,931 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:14,931 INFO L87 Difference]: Start difference. First operand 249 states and 374 transitions. Second operand 4 states. [2018-11-23 12:48:16,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:16,630 INFO L93 Difference]: Finished difference Result 540 states and 815 transitions. [2018-11-23 12:48:16,630 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:16,630 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 12:48:16,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:16,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:16,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 556 transitions. [2018-11-23 12:48:16,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:16,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 556 transitions. [2018-11-23 12:48:16,634 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 556 transitions. [2018-11-23 12:48:17,266 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 556 edges. 556 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:17,273 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:17,273 INFO L226 Difference]: Without dead ends: 316 [2018-11-23 12:48:17,273 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:17,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2018-11-23 12:48:17,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 259. [2018-11-23 12:48:17,464 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:17,464 INFO L82 GeneralOperation]: Start isEquivalent. First operand 316 states. Second operand 259 states. [2018-11-23 12:48:17,464 INFO L74 IsIncluded]: Start isIncluded. First operand 316 states. Second operand 259 states. [2018-11-23 12:48:17,464 INFO L87 Difference]: Start difference. First operand 316 states. Second operand 259 states. [2018-11-23 12:48:17,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:17,470 INFO L93 Difference]: Finished difference Result 316 states and 468 transitions. [2018-11-23 12:48:17,470 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 468 transitions. [2018-11-23 12:48:17,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:17,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:17,471 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand 316 states. [2018-11-23 12:48:17,471 INFO L87 Difference]: Start difference. First operand 259 states. Second operand 316 states. [2018-11-23 12:48:17,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:17,477 INFO L93 Difference]: Finished difference Result 316 states and 468 transitions. [2018-11-23 12:48:17,477 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 468 transitions. [2018-11-23 12:48:17,477 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:17,478 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:17,478 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:17,478 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:17,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-11-23 12:48:17,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 393 transitions. [2018-11-23 12:48:17,482 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 393 transitions. Word has length 87 [2018-11-23 12:48:17,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:17,482 INFO L480 AbstractCegarLoop]: Abstraction has 259 states and 393 transitions. [2018-11-23 12:48:17,483 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:17,483 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 393 transitions. [2018-11-23 12:48:17,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2018-11-23 12:48:17,484 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:17,484 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:17,484 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:17,484 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:17,484 INFO L82 PathProgramCache]: Analyzing trace with hash 1206018514, now seen corresponding path program 1 times [2018-11-23 12:48:17,484 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:17,484 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:17,485 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:17,485 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:17,485 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:17,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:17,845 INFO L256 TraceCheckUtils]: 0: Hoare triple {23681#true} call ULTIMATE.init(); {23681#true} is VALID [2018-11-23 12:48:17,845 INFO L273 TraceCheckUtils]: 1: Hoare triple {23681#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,845 INFO L273 TraceCheckUtils]: 2: Hoare triple {23681#true} assume true; {23681#true} is VALID [2018-11-23 12:48:17,846 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {23681#true} {23681#true} #633#return; {23681#true} is VALID [2018-11-23 12:48:17,846 INFO L256 TraceCheckUtils]: 4: Hoare triple {23681#true} call #t~ret138 := main(); {23681#true} is VALID [2018-11-23 12:48:17,846 INFO L273 TraceCheckUtils]: 5: Hoare triple {23681#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,846 INFO L256 TraceCheckUtils]: 6: Hoare triple {23681#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {23681#true} is VALID [2018-11-23 12:48:17,846 INFO L273 TraceCheckUtils]: 7: Hoare triple {23681#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,847 INFO L273 TraceCheckUtils]: 8: Hoare triple {23681#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {23681#true} is VALID [2018-11-23 12:48:17,847 INFO L273 TraceCheckUtils]: 9: Hoare triple {23681#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {23681#true} is VALID [2018-11-23 12:48:17,847 INFO L273 TraceCheckUtils]: 10: Hoare triple {23681#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {23681#true} is VALID [2018-11-23 12:48:17,847 INFO L273 TraceCheckUtils]: 11: Hoare triple {23681#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,847 INFO L273 TraceCheckUtils]: 12: Hoare triple {23681#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 13: Hoare triple {23681#true} assume !false; {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 14: Hoare triple {23681#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 15: Hoare triple {23681#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 16: Hoare triple {23681#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 17: Hoare triple {23681#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 18: Hoare triple {23681#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,848 INFO L273 TraceCheckUtils]: 19: Hoare triple {23681#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 20: Hoare triple {23681#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 21: Hoare triple {23681#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 22: Hoare triple {23681#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 23: Hoare triple {23681#true} assume 8464 == #t~mem32;havoc #t~mem32; {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 24: Hoare triple {23681#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 25: Hoare triple {23681#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 26: Hoare triple {23681#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 27: Hoare triple {23681#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,849 INFO L273 TraceCheckUtils]: 28: Hoare triple {23681#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 29: Hoare triple {23681#true} ~skip~0 := 0; {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 30: Hoare triple {23681#true} assume !false; {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 31: Hoare triple {23681#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 32: Hoare triple {23681#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 33: Hoare triple {23681#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 34: Hoare triple {23681#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 35: Hoare triple {23681#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,850 INFO L273 TraceCheckUtils]: 36: Hoare triple {23681#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 37: Hoare triple {23681#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 38: Hoare triple {23681#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 39: Hoare triple {23681#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 40: Hoare triple {23681#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 41: Hoare triple {23681#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 42: Hoare triple {23681#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 43: Hoare triple {23681#true} assume 8496 == #t~mem35;havoc #t~mem35; {23681#true} is VALID [2018-11-23 12:48:17,851 INFO L273 TraceCheckUtils]: 44: Hoare triple {23681#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {23681#true} is VALID [2018-11-23 12:48:17,852 INFO L273 TraceCheckUtils]: 45: Hoare triple {23681#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {23681#true} is VALID [2018-11-23 12:48:17,852 INFO L273 TraceCheckUtils]: 46: Hoare triple {23681#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {23681#true} is VALID [2018-11-23 12:48:17,852 INFO L273 TraceCheckUtils]: 47: Hoare triple {23681#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,853 INFO L273 TraceCheckUtils]: 48: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,854 INFO L273 TraceCheckUtils]: 49: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,854 INFO L273 TraceCheckUtils]: 50: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,854 INFO L273 TraceCheckUtils]: 51: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,854 INFO L273 TraceCheckUtils]: 52: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,855 INFO L273 TraceCheckUtils]: 53: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,855 INFO L273 TraceCheckUtils]: 54: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,856 INFO L273 TraceCheckUtils]: 55: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,856 INFO L273 TraceCheckUtils]: 56: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,857 INFO L273 TraceCheckUtils]: 57: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,857 INFO L273 TraceCheckUtils]: 58: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,858 INFO L273 TraceCheckUtils]: 59: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,858 INFO L273 TraceCheckUtils]: 60: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,859 INFO L273 TraceCheckUtils]: 61: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,859 INFO L273 TraceCheckUtils]: 62: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,860 INFO L273 TraceCheckUtils]: 63: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,860 INFO L273 TraceCheckUtils]: 64: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,861 INFO L273 TraceCheckUtils]: 65: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,861 INFO L273 TraceCheckUtils]: 66: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,862 INFO L273 TraceCheckUtils]: 67: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,862 INFO L273 TraceCheckUtils]: 68: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,863 INFO L273 TraceCheckUtils]: 69: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,863 INFO L273 TraceCheckUtils]: 70: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,864 INFO L273 TraceCheckUtils]: 71: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,864 INFO L273 TraceCheckUtils]: 72: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,865 INFO L273 TraceCheckUtils]: 73: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,865 INFO L273 TraceCheckUtils]: 74: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,866 INFO L273 TraceCheckUtils]: 75: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,867 INFO L273 TraceCheckUtils]: 76: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,867 INFO L273 TraceCheckUtils]: 77: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,868 INFO L273 TraceCheckUtils]: 78: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,868 INFO L273 TraceCheckUtils]: 79: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,869 INFO L273 TraceCheckUtils]: 80: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,869 INFO L273 TraceCheckUtils]: 81: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:17,870 INFO L273 TraceCheckUtils]: 82: Hoare triple {23683#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {23684#(= 8656 |ssl3_accept_#t~mem53|)} is VALID [2018-11-23 12:48:17,871 INFO L273 TraceCheckUtils]: 83: Hoare triple {23684#(= 8656 |ssl3_accept_#t~mem53|)} assume 8641 == #t~mem53;havoc #t~mem53; {23682#false} is VALID [2018-11-23 12:48:17,871 INFO L273 TraceCheckUtils]: 84: Hoare triple {23682#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {23682#false} is VALID [2018-11-23 12:48:17,871 INFO L273 TraceCheckUtils]: 85: Hoare triple {23682#false} assume !(4 == ~blastFlag~0); {23682#false} is VALID [2018-11-23 12:48:17,871 INFO L273 TraceCheckUtils]: 86: Hoare triple {23682#false} assume 5 == ~blastFlag~0; {23682#false} is VALID [2018-11-23 12:48:17,872 INFO L273 TraceCheckUtils]: 87: Hoare triple {23682#false} assume !false; {23682#false} is VALID [2018-11-23 12:48:17,883 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:17,884 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:17,884 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:17,884 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 88 [2018-11-23 12:48:17,884 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:17,884 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:17,968 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:17,968 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:17,968 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:17,968 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:17,969 INFO L87 Difference]: Start difference. First operand 259 states and 393 transitions. Second operand 4 states. [2018-11-23 12:48:19,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:19,487 INFO L93 Difference]: Finished difference Result 542 states and 822 transitions. [2018-11-23 12:48:19,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:19,487 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 88 [2018-11-23 12:48:19,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:19,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:19,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 544 transitions. [2018-11-23 12:48:19,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:19,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 544 transitions. [2018-11-23 12:48:19,494 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 544 transitions. [2018-11-23 12:48:20,034 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 544 edges. 544 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:20,040 INFO L225 Difference]: With dead ends: 542 [2018-11-23 12:48:20,040 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 12:48:20,041 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:20,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 12:48:20,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 260. [2018-11-23 12:48:20,139 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:20,140 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:20,140 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:20,140 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:20,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:20,147 INFO L93 Difference]: Finished difference Result 308 states and 456 transitions. [2018-11-23 12:48:20,147 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 456 transitions. [2018-11-23 12:48:20,147 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:20,147 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:20,147 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 308 states. [2018-11-23 12:48:20,147 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 308 states. [2018-11-23 12:48:20,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:20,155 INFO L93 Difference]: Finished difference Result 308 states and 456 transitions. [2018-11-23 12:48:20,155 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 456 transitions. [2018-11-23 12:48:20,156 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:20,156 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:20,156 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:20,156 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:20,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:20,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 394 transitions. [2018-11-23 12:48:20,162 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 394 transitions. Word has length 88 [2018-11-23 12:48:20,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:20,163 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 394 transitions. [2018-11-23 12:48:20,163 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:20,163 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 394 transitions. [2018-11-23 12:48:20,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 12:48:20,164 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:20,164 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:20,164 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:20,165 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:20,165 INFO L82 PathProgramCache]: Analyzing trace with hash 62751798, now seen corresponding path program 1 times [2018-11-23 12:48:20,165 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:20,165 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:20,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:20,166 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:20,166 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:20,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:20,700 INFO L256 TraceCheckUtils]: 0: Hoare triple {25231#true} call ULTIMATE.init(); {25231#true} is VALID [2018-11-23 12:48:20,700 INFO L273 TraceCheckUtils]: 1: Hoare triple {25231#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,700 INFO L273 TraceCheckUtils]: 2: Hoare triple {25231#true} assume true; {25231#true} is VALID [2018-11-23 12:48:20,700 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {25231#true} {25231#true} #633#return; {25231#true} is VALID [2018-11-23 12:48:20,701 INFO L256 TraceCheckUtils]: 4: Hoare triple {25231#true} call #t~ret138 := main(); {25231#true} is VALID [2018-11-23 12:48:20,701 INFO L273 TraceCheckUtils]: 5: Hoare triple {25231#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,701 INFO L256 TraceCheckUtils]: 6: Hoare triple {25231#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {25231#true} is VALID [2018-11-23 12:48:20,701 INFO L273 TraceCheckUtils]: 7: Hoare triple {25231#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,701 INFO L273 TraceCheckUtils]: 8: Hoare triple {25231#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {25231#true} is VALID [2018-11-23 12:48:20,702 INFO L273 TraceCheckUtils]: 9: Hoare triple {25231#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {25231#true} is VALID [2018-11-23 12:48:20,702 INFO L273 TraceCheckUtils]: 10: Hoare triple {25231#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {25231#true} is VALID [2018-11-23 12:48:20,702 INFO L273 TraceCheckUtils]: 11: Hoare triple {25231#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,702 INFO L273 TraceCheckUtils]: 12: Hoare triple {25231#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {25231#true} is VALID [2018-11-23 12:48:20,702 INFO L273 TraceCheckUtils]: 13: Hoare triple {25231#true} assume !false; {25231#true} is VALID [2018-11-23 12:48:20,702 INFO L273 TraceCheckUtils]: 14: Hoare triple {25231#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 15: Hoare triple {25231#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 16: Hoare triple {25231#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 17: Hoare triple {25231#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 18: Hoare triple {25231#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 19: Hoare triple {25231#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 20: Hoare triple {25231#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 21: Hoare triple {25231#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,703 INFO L273 TraceCheckUtils]: 22: Hoare triple {25231#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 23: Hoare triple {25231#true} assume 8464 == #t~mem32;havoc #t~mem32; {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 24: Hoare triple {25231#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 25: Hoare triple {25231#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 26: Hoare triple {25231#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 27: Hoare triple {25231#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 28: Hoare triple {25231#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 29: Hoare triple {25231#true} ~skip~0 := 0; {25231#true} is VALID [2018-11-23 12:48:20,704 INFO L273 TraceCheckUtils]: 30: Hoare triple {25231#true} assume !false; {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 31: Hoare triple {25231#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 32: Hoare triple {25231#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 33: Hoare triple {25231#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 34: Hoare triple {25231#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 35: Hoare triple {25231#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 36: Hoare triple {25231#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 37: Hoare triple {25231#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 38: Hoare triple {25231#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,705 INFO L273 TraceCheckUtils]: 39: Hoare triple {25231#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 40: Hoare triple {25231#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 41: Hoare triple {25231#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 42: Hoare triple {25231#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 43: Hoare triple {25231#true} assume 8496 == #t~mem35;havoc #t~mem35; {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 44: Hoare triple {25231#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 45: Hoare triple {25231#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {25231#true} is VALID [2018-11-23 12:48:20,706 INFO L273 TraceCheckUtils]: 46: Hoare triple {25231#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {25231#true} is VALID [2018-11-23 12:48:20,712 INFO L273 TraceCheckUtils]: 47: Hoare triple {25231#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,713 INFO L273 TraceCheckUtils]: 48: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,713 INFO L273 TraceCheckUtils]: 49: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,713 INFO L273 TraceCheckUtils]: 50: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,714 INFO L273 TraceCheckUtils]: 51: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,714 INFO L273 TraceCheckUtils]: 52: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,714 INFO L273 TraceCheckUtils]: 53: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,715 INFO L273 TraceCheckUtils]: 54: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,715 INFO L273 TraceCheckUtils]: 55: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,715 INFO L273 TraceCheckUtils]: 56: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,716 INFO L273 TraceCheckUtils]: 57: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:20,716 INFO L273 TraceCheckUtils]: 58: Hoare triple {25233#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25234#(= 8656 |ssl3_accept_#t~mem29|)} is VALID [2018-11-23 12:48:20,718 INFO L273 TraceCheckUtils]: 59: Hoare triple {25234#(= 8656 |ssl3_accept_#t~mem29|)} assume 8480 == #t~mem29;havoc #t~mem29; {25232#false} is VALID [2018-11-23 12:48:20,718 INFO L273 TraceCheckUtils]: 60: Hoare triple {25232#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {25232#false} is VALID [2018-11-23 12:48:20,718 INFO L273 TraceCheckUtils]: 61: Hoare triple {25232#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,718 INFO L273 TraceCheckUtils]: 62: Hoare triple {25232#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,719 INFO L273 TraceCheckUtils]: 63: Hoare triple {25232#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {25232#false} is VALID [2018-11-23 12:48:20,719 INFO L273 TraceCheckUtils]: 64: Hoare triple {25232#false} ~skip~0 := 0; {25232#false} is VALID [2018-11-23 12:48:20,719 INFO L273 TraceCheckUtils]: 65: Hoare triple {25232#false} assume !false; {25232#false} is VALID [2018-11-23 12:48:20,719 INFO L273 TraceCheckUtils]: 66: Hoare triple {25232#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,719 INFO L273 TraceCheckUtils]: 67: Hoare triple {25232#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,720 INFO L273 TraceCheckUtils]: 68: Hoare triple {25232#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,720 INFO L273 TraceCheckUtils]: 69: Hoare triple {25232#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,720 INFO L273 TraceCheckUtils]: 70: Hoare triple {25232#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,720 INFO L273 TraceCheckUtils]: 71: Hoare triple {25232#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,720 INFO L273 TraceCheckUtils]: 72: Hoare triple {25232#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,720 INFO L273 TraceCheckUtils]: 73: Hoare triple {25232#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 74: Hoare triple {25232#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 75: Hoare triple {25232#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 76: Hoare triple {25232#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 77: Hoare triple {25232#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 78: Hoare triple {25232#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 79: Hoare triple {25232#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 80: Hoare triple {25232#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,721 INFO L273 TraceCheckUtils]: 81: Hoare triple {25232#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 82: Hoare triple {25232#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 83: Hoare triple {25232#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 84: Hoare triple {25232#false} assume 8544 == #t~mem41;havoc #t~mem41; {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 85: Hoare triple {25232#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 86: Hoare triple {25232#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 87: Hoare triple {25232#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 88: Hoare triple {25232#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 89: Hoare triple {25232#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {25232#false} is VALID [2018-11-23 12:48:20,722 INFO L273 TraceCheckUtils]: 90: Hoare triple {25232#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {25232#false} is VALID [2018-11-23 12:48:20,723 INFO L273 TraceCheckUtils]: 91: Hoare triple {25232#false} assume 7 == ~blastFlag~0; {25232#false} is VALID [2018-11-23 12:48:20,723 INFO L273 TraceCheckUtils]: 92: Hoare triple {25232#false} assume !false; {25232#false} is VALID [2018-11-23 12:48:20,728 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:20,728 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:20,728 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:20,729 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:20,729 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:20,729 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:20,811 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:20,812 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:20,812 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:20,812 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:20,813 INFO L87 Difference]: Start difference. First operand 260 states and 394 transitions. Second operand 4 states. [2018-11-23 12:48:22,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:22,363 INFO L93 Difference]: Finished difference Result 543 states and 822 transitions. [2018-11-23 12:48:22,363 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:22,363 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:22,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:22,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:22,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 543 transitions. [2018-11-23 12:48:22,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:22,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 543 transitions. [2018-11-23 12:48:22,368 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 543 transitions. [2018-11-23 12:48:22,973 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 543 edges. 543 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:22,980 INFO L225 Difference]: With dead ends: 543 [2018-11-23 12:48:22,980 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 12:48:22,981 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:22,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 12:48:23,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 260. [2018-11-23 12:48:23,099 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:23,099 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:23,099 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:23,100 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 260 states. [2018-11-23 12:48:23,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:23,106 INFO L93 Difference]: Finished difference Result 308 states and 455 transitions. [2018-11-23 12:48:23,106 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 455 transitions. [2018-11-23 12:48:23,106 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:23,106 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:23,106 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 308 states. [2018-11-23 12:48:23,106 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 308 states. [2018-11-23 12:48:23,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:23,113 INFO L93 Difference]: Finished difference Result 308 states and 455 transitions. [2018-11-23 12:48:23,113 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 455 transitions. [2018-11-23 12:48:23,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:23,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:23,114 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:23,114 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:23,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:23,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 393 transitions. [2018-11-23 12:48:23,120 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 393 transitions. Word has length 93 [2018-11-23 12:48:23,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:23,121 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 393 transitions. [2018-11-23 12:48:23,121 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:23,121 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 393 transitions. [2018-11-23 12:48:23,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2018-11-23 12:48:23,122 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:23,122 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:23,122 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:23,122 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:23,123 INFO L82 PathProgramCache]: Analyzing trace with hash 1991024500, now seen corresponding path program 1 times [2018-11-23 12:48:23,123 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:23,123 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:23,124 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:23,124 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:23,124 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:23,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:23,901 INFO L256 TraceCheckUtils]: 0: Hoare triple {26782#true} call ULTIMATE.init(); {26782#true} is VALID [2018-11-23 12:48:23,902 INFO L273 TraceCheckUtils]: 1: Hoare triple {26782#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,902 INFO L273 TraceCheckUtils]: 2: Hoare triple {26782#true} assume true; {26782#true} is VALID [2018-11-23 12:48:23,902 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {26782#true} {26782#true} #633#return; {26782#true} is VALID [2018-11-23 12:48:23,902 INFO L256 TraceCheckUtils]: 4: Hoare triple {26782#true} call #t~ret138 := main(); {26782#true} is VALID [2018-11-23 12:48:23,903 INFO L273 TraceCheckUtils]: 5: Hoare triple {26782#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,903 INFO L256 TraceCheckUtils]: 6: Hoare triple {26782#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {26782#true} is VALID [2018-11-23 12:48:23,903 INFO L273 TraceCheckUtils]: 7: Hoare triple {26782#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,903 INFO L273 TraceCheckUtils]: 8: Hoare triple {26782#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {26782#true} is VALID [2018-11-23 12:48:23,903 INFO L273 TraceCheckUtils]: 9: Hoare triple {26782#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {26782#true} is VALID [2018-11-23 12:48:23,903 INFO L273 TraceCheckUtils]: 10: Hoare triple {26782#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {26782#true} is VALID [2018-11-23 12:48:23,904 INFO L273 TraceCheckUtils]: 11: Hoare triple {26782#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,904 INFO L273 TraceCheckUtils]: 12: Hoare triple {26782#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {26782#true} is VALID [2018-11-23 12:48:23,904 INFO L273 TraceCheckUtils]: 13: Hoare triple {26782#true} assume !false; {26782#true} is VALID [2018-11-23 12:48:23,904 INFO L273 TraceCheckUtils]: 14: Hoare triple {26782#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,904 INFO L273 TraceCheckUtils]: 15: Hoare triple {26782#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,905 INFO L273 TraceCheckUtils]: 16: Hoare triple {26782#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,905 INFO L273 TraceCheckUtils]: 17: Hoare triple {26782#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,905 INFO L273 TraceCheckUtils]: 18: Hoare triple {26782#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,905 INFO L273 TraceCheckUtils]: 19: Hoare triple {26782#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,905 INFO L273 TraceCheckUtils]: 20: Hoare triple {26782#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,906 INFO L273 TraceCheckUtils]: 21: Hoare triple {26782#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,906 INFO L273 TraceCheckUtils]: 22: Hoare triple {26782#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,906 INFO L273 TraceCheckUtils]: 23: Hoare triple {26782#true} assume 8464 == #t~mem32;havoc #t~mem32; {26782#true} is VALID [2018-11-23 12:48:23,906 INFO L273 TraceCheckUtils]: 24: Hoare triple {26782#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {26782#true} is VALID [2018-11-23 12:48:23,906 INFO L273 TraceCheckUtils]: 25: Hoare triple {26782#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {26782#true} is VALID [2018-11-23 12:48:23,906 INFO L273 TraceCheckUtils]: 26: Hoare triple {26782#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,907 INFO L273 TraceCheckUtils]: 27: Hoare triple {26782#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,907 INFO L273 TraceCheckUtils]: 28: Hoare triple {26782#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {26782#true} is VALID [2018-11-23 12:48:23,907 INFO L273 TraceCheckUtils]: 29: Hoare triple {26782#true} ~skip~0 := 0; {26782#true} is VALID [2018-11-23 12:48:23,907 INFO L273 TraceCheckUtils]: 30: Hoare triple {26782#true} assume !false; {26782#true} is VALID [2018-11-23 12:48:23,907 INFO L273 TraceCheckUtils]: 31: Hoare triple {26782#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,907 INFO L273 TraceCheckUtils]: 32: Hoare triple {26782#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 33: Hoare triple {26782#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 34: Hoare triple {26782#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 35: Hoare triple {26782#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 36: Hoare triple {26782#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 37: Hoare triple {26782#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 38: Hoare triple {26782#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,908 INFO L273 TraceCheckUtils]: 39: Hoare triple {26782#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,909 INFO L273 TraceCheckUtils]: 40: Hoare triple {26782#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,909 INFO L273 TraceCheckUtils]: 41: Hoare triple {26782#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,909 INFO L273 TraceCheckUtils]: 42: Hoare triple {26782#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,909 INFO L273 TraceCheckUtils]: 43: Hoare triple {26782#true} assume 8496 == #t~mem35;havoc #t~mem35; {26782#true} is VALID [2018-11-23 12:48:23,909 INFO L273 TraceCheckUtils]: 44: Hoare triple {26782#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {26782#true} is VALID [2018-11-23 12:48:23,909 INFO L273 TraceCheckUtils]: 45: Hoare triple {26782#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {26782#true} is VALID [2018-11-23 12:48:23,910 INFO L273 TraceCheckUtils]: 46: Hoare triple {26782#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {26782#true} is VALID [2018-11-23 12:48:23,922 INFO L273 TraceCheckUtils]: 47: Hoare triple {26782#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:23,936 INFO L273 TraceCheckUtils]: 48: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:23,946 INFO L273 TraceCheckUtils]: 49: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:23,957 INFO L273 TraceCheckUtils]: 50: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:23,970 INFO L273 TraceCheckUtils]: 51: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:23,982 INFO L273 TraceCheckUtils]: 52: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:23,995 INFO L273 TraceCheckUtils]: 53: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,010 INFO L273 TraceCheckUtils]: 54: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,021 INFO L273 TraceCheckUtils]: 55: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,033 INFO L273 TraceCheckUtils]: 56: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,046 INFO L273 TraceCheckUtils]: 57: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:24,059 INFO L273 TraceCheckUtils]: 58: Hoare triple {26784#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26785#(= 8512 |ssl3_accept_#t~mem29|)} is VALID [2018-11-23 12:48:24,074 INFO L273 TraceCheckUtils]: 59: Hoare triple {26785#(= 8512 |ssl3_accept_#t~mem29|)} assume 8480 == #t~mem29;havoc #t~mem29; {26783#false} is VALID [2018-11-23 12:48:24,074 INFO L273 TraceCheckUtils]: 60: Hoare triple {26783#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {26783#false} is VALID [2018-11-23 12:48:24,074 INFO L273 TraceCheckUtils]: 61: Hoare triple {26783#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,075 INFO L273 TraceCheckUtils]: 62: Hoare triple {26783#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,075 INFO L273 TraceCheckUtils]: 63: Hoare triple {26783#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {26783#false} is VALID [2018-11-23 12:48:24,075 INFO L273 TraceCheckUtils]: 64: Hoare triple {26783#false} ~skip~0 := 0; {26783#false} is VALID [2018-11-23 12:48:24,075 INFO L273 TraceCheckUtils]: 65: Hoare triple {26783#false} assume !false; {26783#false} is VALID [2018-11-23 12:48:24,075 INFO L273 TraceCheckUtils]: 66: Hoare triple {26783#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,075 INFO L273 TraceCheckUtils]: 67: Hoare triple {26783#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,076 INFO L273 TraceCheckUtils]: 68: Hoare triple {26783#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,076 INFO L273 TraceCheckUtils]: 69: Hoare triple {26783#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,076 INFO L273 TraceCheckUtils]: 70: Hoare triple {26783#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,076 INFO L273 TraceCheckUtils]: 71: Hoare triple {26783#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,076 INFO L273 TraceCheckUtils]: 72: Hoare triple {26783#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,076 INFO L273 TraceCheckUtils]: 73: Hoare triple {26783#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,077 INFO L273 TraceCheckUtils]: 74: Hoare triple {26783#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,077 INFO L273 TraceCheckUtils]: 75: Hoare triple {26783#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,077 INFO L273 TraceCheckUtils]: 76: Hoare triple {26783#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,077 INFO L273 TraceCheckUtils]: 77: Hoare triple {26783#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,077 INFO L273 TraceCheckUtils]: 78: Hoare triple {26783#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,077 INFO L273 TraceCheckUtils]: 79: Hoare triple {26783#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,078 INFO L273 TraceCheckUtils]: 80: Hoare triple {26783#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,078 INFO L273 TraceCheckUtils]: 81: Hoare triple {26783#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,078 INFO L273 TraceCheckUtils]: 82: Hoare triple {26783#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,078 INFO L273 TraceCheckUtils]: 83: Hoare triple {26783#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,078 INFO L273 TraceCheckUtils]: 84: Hoare triple {26783#false} assume 8544 == #t~mem41;havoc #t~mem41; {26783#false} is VALID [2018-11-23 12:48:24,078 INFO L273 TraceCheckUtils]: 85: Hoare triple {26783#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,079 INFO L273 TraceCheckUtils]: 86: Hoare triple {26783#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,079 INFO L273 TraceCheckUtils]: 87: Hoare triple {26783#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {26783#false} is VALID [2018-11-23 12:48:24,079 INFO L273 TraceCheckUtils]: 88: Hoare triple {26783#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {26783#false} is VALID [2018-11-23 12:48:24,079 INFO L273 TraceCheckUtils]: 89: Hoare triple {26783#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {26783#false} is VALID [2018-11-23 12:48:24,079 INFO L273 TraceCheckUtils]: 90: Hoare triple {26783#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {26783#false} is VALID [2018-11-23 12:48:24,080 INFO L273 TraceCheckUtils]: 91: Hoare triple {26783#false} assume 7 == ~blastFlag~0; {26783#false} is VALID [2018-11-23 12:48:24,080 INFO L273 TraceCheckUtils]: 92: Hoare triple {26783#false} assume !false; {26783#false} is VALID [2018-11-23 12:48:24,088 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:24,088 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:24,088 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:24,089 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:24,089 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:24,089 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:24,273 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 83 edges. 83 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:24,273 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:24,274 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:24,274 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:24,274 INFO L87 Difference]: Start difference. First operand 260 states and 393 transitions. Second operand 4 states. [2018-11-23 12:48:25,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:25,598 INFO L93 Difference]: Finished difference Result 520 states and 790 transitions. [2018-11-23 12:48:25,598 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:25,598 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 93 [2018-11-23 12:48:25,599 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:25,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:25,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 483 transitions. [2018-11-23 12:48:25,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:25,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 483 transitions. [2018-11-23 12:48:25,603 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 483 transitions. [2018-11-23 12:48:26,061 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 483 edges. 483 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:26,067 INFO L225 Difference]: With dead ends: 520 [2018-11-23 12:48:26,067 INFO L226 Difference]: Without dead ends: 285 [2018-11-23 12:48:26,068 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:26,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 285 states. [2018-11-23 12:48:26,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 285 to 260. [2018-11-23 12:48:26,170 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:26,170 INFO L82 GeneralOperation]: Start isEquivalent. First operand 285 states. Second operand 260 states. [2018-11-23 12:48:26,170 INFO L74 IsIncluded]: Start isIncluded. First operand 285 states. Second operand 260 states. [2018-11-23 12:48:26,170 INFO L87 Difference]: Start difference. First operand 285 states. Second operand 260 states. [2018-11-23 12:48:26,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:26,175 INFO L93 Difference]: Finished difference Result 285 states and 424 transitions. [2018-11-23 12:48:26,175 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 424 transitions. [2018-11-23 12:48:26,175 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:26,175 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:26,176 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 285 states. [2018-11-23 12:48:26,176 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 285 states. [2018-11-23 12:48:26,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:26,181 INFO L93 Difference]: Finished difference Result 285 states and 424 transitions. [2018-11-23 12:48:26,181 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 424 transitions. [2018-11-23 12:48:26,181 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:26,181 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:26,181 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:26,181 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:26,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:26,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 392 transitions. [2018-11-23 12:48:26,186 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 392 transitions. Word has length 93 [2018-11-23 12:48:26,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:26,186 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 392 transitions. [2018-11-23 12:48:26,186 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:26,186 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 392 transitions. [2018-11-23 12:48:26,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:26,187 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:26,187 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:26,187 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:26,187 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:26,187 INFO L82 PathProgramCache]: Analyzing trace with hash 19690565, now seen corresponding path program 1 times [2018-11-23 12:48:26,187 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:26,187 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:26,188 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:26,188 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:26,188 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:26,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:26,536 INFO L256 TraceCheckUtils]: 0: Hoare triple {28256#true} call ULTIMATE.init(); {28256#true} is VALID [2018-11-23 12:48:26,536 INFO L273 TraceCheckUtils]: 1: Hoare triple {28256#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,537 INFO L273 TraceCheckUtils]: 2: Hoare triple {28256#true} assume true; {28256#true} is VALID [2018-11-23 12:48:26,537 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {28256#true} {28256#true} #633#return; {28256#true} is VALID [2018-11-23 12:48:26,537 INFO L256 TraceCheckUtils]: 4: Hoare triple {28256#true} call #t~ret138 := main(); {28256#true} is VALID [2018-11-23 12:48:26,537 INFO L273 TraceCheckUtils]: 5: Hoare triple {28256#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,538 INFO L256 TraceCheckUtils]: 6: Hoare triple {28256#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {28256#true} is VALID [2018-11-23 12:48:26,538 INFO L273 TraceCheckUtils]: 7: Hoare triple {28256#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,538 INFO L273 TraceCheckUtils]: 8: Hoare triple {28256#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {28256#true} is VALID [2018-11-23 12:48:26,538 INFO L273 TraceCheckUtils]: 9: Hoare triple {28256#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {28256#true} is VALID [2018-11-23 12:48:26,538 INFO L273 TraceCheckUtils]: 10: Hoare triple {28256#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {28256#true} is VALID [2018-11-23 12:48:26,539 INFO L273 TraceCheckUtils]: 11: Hoare triple {28256#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,539 INFO L273 TraceCheckUtils]: 12: Hoare triple {28256#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {28256#true} is VALID [2018-11-23 12:48:26,539 INFO L273 TraceCheckUtils]: 13: Hoare triple {28256#true} assume !false; {28256#true} is VALID [2018-11-23 12:48:26,539 INFO L273 TraceCheckUtils]: 14: Hoare triple {28256#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,539 INFO L273 TraceCheckUtils]: 15: Hoare triple {28256#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,540 INFO L273 TraceCheckUtils]: 16: Hoare triple {28256#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,540 INFO L273 TraceCheckUtils]: 17: Hoare triple {28256#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,540 INFO L273 TraceCheckUtils]: 18: Hoare triple {28256#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,540 INFO L273 TraceCheckUtils]: 19: Hoare triple {28256#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,540 INFO L273 TraceCheckUtils]: 20: Hoare triple {28256#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,540 INFO L273 TraceCheckUtils]: 21: Hoare triple {28256#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 22: Hoare triple {28256#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 23: Hoare triple {28256#true} assume 8464 == #t~mem32;havoc #t~mem32; {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 24: Hoare triple {28256#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 25: Hoare triple {28256#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 26: Hoare triple {28256#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 27: Hoare triple {28256#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 28: Hoare triple {28256#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {28256#true} is VALID [2018-11-23 12:48:26,541 INFO L273 TraceCheckUtils]: 29: Hoare triple {28256#true} ~skip~0 := 0; {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 30: Hoare triple {28256#true} assume !false; {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 31: Hoare triple {28256#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 32: Hoare triple {28256#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 33: Hoare triple {28256#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 34: Hoare triple {28256#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 35: Hoare triple {28256#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 36: Hoare triple {28256#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 37: Hoare triple {28256#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,542 INFO L273 TraceCheckUtils]: 38: Hoare triple {28256#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,543 INFO L273 TraceCheckUtils]: 39: Hoare triple {28256#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,543 INFO L273 TraceCheckUtils]: 40: Hoare triple {28256#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,543 INFO L273 TraceCheckUtils]: 41: Hoare triple {28256#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,543 INFO L273 TraceCheckUtils]: 42: Hoare triple {28256#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,543 INFO L273 TraceCheckUtils]: 43: Hoare triple {28256#true} assume 8496 == #t~mem35;havoc #t~mem35; {28256#true} is VALID [2018-11-23 12:48:26,544 INFO L273 TraceCheckUtils]: 44: Hoare triple {28256#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {28256#true} is VALID [2018-11-23 12:48:26,544 INFO L273 TraceCheckUtils]: 45: Hoare triple {28256#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {28256#true} is VALID [2018-11-23 12:48:26,544 INFO L273 TraceCheckUtils]: 46: Hoare triple {28256#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {28256#true} is VALID [2018-11-23 12:48:26,552 INFO L273 TraceCheckUtils]: 47: Hoare triple {28256#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,553 INFO L273 TraceCheckUtils]: 48: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,553 INFO L273 TraceCheckUtils]: 49: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,554 INFO L273 TraceCheckUtils]: 50: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,554 INFO L273 TraceCheckUtils]: 51: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,554 INFO L273 TraceCheckUtils]: 52: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,555 INFO L273 TraceCheckUtils]: 53: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,555 INFO L273 TraceCheckUtils]: 54: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,555 INFO L273 TraceCheckUtils]: 55: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,556 INFO L273 TraceCheckUtils]: 56: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,556 INFO L273 TraceCheckUtils]: 57: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,556 INFO L273 TraceCheckUtils]: 58: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:26,557 INFO L273 TraceCheckUtils]: 59: Hoare triple {28258#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28259#(= 8656 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:48:26,557 INFO L273 TraceCheckUtils]: 60: Hoare triple {28259#(= 8656 |ssl3_accept_#t~mem30|)} assume 8481 == #t~mem30;havoc #t~mem30; {28257#false} is VALID [2018-11-23 12:48:26,558 INFO L273 TraceCheckUtils]: 61: Hoare triple {28257#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {28257#false} is VALID [2018-11-23 12:48:26,558 INFO L273 TraceCheckUtils]: 62: Hoare triple {28257#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,558 INFO L273 TraceCheckUtils]: 63: Hoare triple {28257#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,558 INFO L273 TraceCheckUtils]: 64: Hoare triple {28257#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {28257#false} is VALID [2018-11-23 12:48:26,558 INFO L273 TraceCheckUtils]: 65: Hoare triple {28257#false} ~skip~0 := 0; {28257#false} is VALID [2018-11-23 12:48:26,559 INFO L273 TraceCheckUtils]: 66: Hoare triple {28257#false} assume !false; {28257#false} is VALID [2018-11-23 12:48:26,559 INFO L273 TraceCheckUtils]: 67: Hoare triple {28257#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,559 INFO L273 TraceCheckUtils]: 68: Hoare triple {28257#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,559 INFO L273 TraceCheckUtils]: 69: Hoare triple {28257#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,559 INFO L273 TraceCheckUtils]: 70: Hoare triple {28257#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,560 INFO L273 TraceCheckUtils]: 71: Hoare triple {28257#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,560 INFO L273 TraceCheckUtils]: 72: Hoare triple {28257#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,560 INFO L273 TraceCheckUtils]: 73: Hoare triple {28257#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,560 INFO L273 TraceCheckUtils]: 74: Hoare triple {28257#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,560 INFO L273 TraceCheckUtils]: 75: Hoare triple {28257#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,561 INFO L273 TraceCheckUtils]: 76: Hoare triple {28257#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,561 INFO L273 TraceCheckUtils]: 77: Hoare triple {28257#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,561 INFO L273 TraceCheckUtils]: 78: Hoare triple {28257#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,561 INFO L273 TraceCheckUtils]: 79: Hoare triple {28257#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,561 INFO L273 TraceCheckUtils]: 80: Hoare triple {28257#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,562 INFO L273 TraceCheckUtils]: 81: Hoare triple {28257#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,562 INFO L273 TraceCheckUtils]: 82: Hoare triple {28257#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,562 INFO L273 TraceCheckUtils]: 83: Hoare triple {28257#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,562 INFO L273 TraceCheckUtils]: 84: Hoare triple {28257#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,562 INFO L273 TraceCheckUtils]: 85: Hoare triple {28257#false} assume 8544 == #t~mem41;havoc #t~mem41; {28257#false} is VALID [2018-11-23 12:48:26,562 INFO L273 TraceCheckUtils]: 86: Hoare triple {28257#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 87: Hoare triple {28257#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 88: Hoare triple {28257#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 89: Hoare triple {28257#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 90: Hoare triple {28257#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 91: Hoare triple {28257#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 92: Hoare triple {28257#false} assume 7 == ~blastFlag~0; {28257#false} is VALID [2018-11-23 12:48:26,563 INFO L273 TraceCheckUtils]: 93: Hoare triple {28257#false} assume !false; {28257#false} is VALID [2018-11-23 12:48:26,569 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:26,569 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:26,569 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:26,570 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:26,570 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:26,570 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:26,652 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:26,652 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:26,653 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:26,653 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:26,653 INFO L87 Difference]: Start difference. First operand 260 states and 392 transitions. Second operand 4 states. [2018-11-23 12:48:28,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:28,085 INFO L93 Difference]: Finished difference Result 541 states and 816 transitions. [2018-11-23 12:48:28,085 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:28,085 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:28,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:28,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:28,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 540 transitions. [2018-11-23 12:48:28,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:28,090 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 540 transitions. [2018-11-23 12:48:28,090 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 540 transitions. [2018-11-23 12:48:28,669 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 540 edges. 540 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:28,676 INFO L225 Difference]: With dead ends: 541 [2018-11-23 12:48:28,676 INFO L226 Difference]: Without dead ends: 306 [2018-11-23 12:48:28,677 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:28,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2018-11-23 12:48:28,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 260. [2018-11-23 12:48:28,840 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:28,840 INFO L82 GeneralOperation]: Start isEquivalent. First operand 306 states. Second operand 260 states. [2018-11-23 12:48:28,840 INFO L74 IsIncluded]: Start isIncluded. First operand 306 states. Second operand 260 states. [2018-11-23 12:48:28,840 INFO L87 Difference]: Start difference. First operand 306 states. Second operand 260 states. [2018-11-23 12:48:28,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:28,847 INFO L93 Difference]: Finished difference Result 306 states and 451 transitions. [2018-11-23 12:48:28,847 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 451 transitions. [2018-11-23 12:48:28,848 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:28,848 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:28,848 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 306 states. [2018-11-23 12:48:28,848 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 306 states. [2018-11-23 12:48:28,855 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:28,855 INFO L93 Difference]: Finished difference Result 306 states and 451 transitions. [2018-11-23 12:48:28,855 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 451 transitions. [2018-11-23 12:48:28,856 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:28,856 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:28,856 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:28,856 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:28,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:28,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 391 transitions. [2018-11-23 12:48:28,861 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 391 transitions. Word has length 94 [2018-11-23 12:48:28,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:28,862 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 391 transitions. [2018-11-23 12:48:28,862 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:28,862 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 391 transitions. [2018-11-23 12:48:28,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:28,863 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:28,863 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:28,863 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:28,863 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:28,863 INFO L82 PathProgramCache]: Analyzing trace with hash -1623840890, now seen corresponding path program 1 times [2018-11-23 12:48:28,864 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:28,864 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:28,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:28,865 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:28,865 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:28,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:28,986 INFO L256 TraceCheckUtils]: 0: Hoare triple {29800#true} call ULTIMATE.init(); {29800#true} is VALID [2018-11-23 12:48:28,986 INFO L273 TraceCheckUtils]: 1: Hoare triple {29800#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,986 INFO L273 TraceCheckUtils]: 2: Hoare triple {29800#true} assume true; {29800#true} is VALID [2018-11-23 12:48:28,986 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {29800#true} {29800#true} #633#return; {29800#true} is VALID [2018-11-23 12:48:28,986 INFO L256 TraceCheckUtils]: 4: Hoare triple {29800#true} call #t~ret138 := main(); {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 5: Hoare triple {29800#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L256 TraceCheckUtils]: 6: Hoare triple {29800#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 7: Hoare triple {29800#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 8: Hoare triple {29800#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 9: Hoare triple {29800#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 10: Hoare triple {29800#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 11: Hoare triple {29800#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,987 INFO L273 TraceCheckUtils]: 12: Hoare triple {29800#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 13: Hoare triple {29800#true} assume !false; {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 14: Hoare triple {29800#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 15: Hoare triple {29800#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 16: Hoare triple {29800#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 17: Hoare triple {29800#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 18: Hoare triple {29800#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 19: Hoare triple {29800#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,988 INFO L273 TraceCheckUtils]: 20: Hoare triple {29800#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 21: Hoare triple {29800#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 22: Hoare triple {29800#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 23: Hoare triple {29800#true} assume 8464 == #t~mem32;havoc #t~mem32; {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 24: Hoare triple {29800#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 25: Hoare triple {29800#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 26: Hoare triple {29800#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 27: Hoare triple {29800#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,989 INFO L273 TraceCheckUtils]: 28: Hoare triple {29800#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 29: Hoare triple {29800#true} ~skip~0 := 0; {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 30: Hoare triple {29800#true} assume !false; {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 31: Hoare triple {29800#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 32: Hoare triple {29800#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 33: Hoare triple {29800#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 34: Hoare triple {29800#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 35: Hoare triple {29800#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 36: Hoare triple {29800#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,990 INFO L273 TraceCheckUtils]: 37: Hoare triple {29800#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 38: Hoare triple {29800#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 39: Hoare triple {29800#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 40: Hoare triple {29800#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 41: Hoare triple {29800#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 42: Hoare triple {29800#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 43: Hoare triple {29800#true} assume 8496 == #t~mem35;havoc #t~mem35; {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 44: Hoare triple {29800#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {29800#true} is VALID [2018-11-23 12:48:28,991 INFO L273 TraceCheckUtils]: 45: Hoare triple {29800#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {29800#true} is VALID [2018-11-23 12:48:28,992 INFO L273 TraceCheckUtils]: 46: Hoare triple {29800#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {29800#true} is VALID [2018-11-23 12:48:28,992 INFO L273 TraceCheckUtils]: 47: Hoare triple {29800#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,993 INFO L273 TraceCheckUtils]: 48: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,993 INFO L273 TraceCheckUtils]: 49: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,994 INFO L273 TraceCheckUtils]: 50: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,994 INFO L273 TraceCheckUtils]: 51: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,995 INFO L273 TraceCheckUtils]: 52: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,995 INFO L273 TraceCheckUtils]: 53: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,996 INFO L273 TraceCheckUtils]: 54: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,996 INFO L273 TraceCheckUtils]: 55: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,997 INFO L273 TraceCheckUtils]: 56: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,997 INFO L273 TraceCheckUtils]: 57: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,998 INFO L273 TraceCheckUtils]: 58: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,998 INFO L273 TraceCheckUtils]: 59: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:28,999 INFO L273 TraceCheckUtils]: 60: Hoare triple {29802#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29803#(= 8656 |ssl3_accept_#t~mem31|)} is VALID [2018-11-23 12:48:29,000 INFO L273 TraceCheckUtils]: 61: Hoare triple {29803#(= 8656 |ssl3_accept_#t~mem31|)} assume 8482 == #t~mem31;havoc #t~mem31; {29801#false} is VALID [2018-11-23 12:48:29,000 INFO L273 TraceCheckUtils]: 62: Hoare triple {29801#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,000 INFO L273 TraceCheckUtils]: 63: Hoare triple {29801#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,000 INFO L273 TraceCheckUtils]: 64: Hoare triple {29801#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {29801#false} is VALID [2018-11-23 12:48:29,001 INFO L273 TraceCheckUtils]: 65: Hoare triple {29801#false} ~skip~0 := 0; {29801#false} is VALID [2018-11-23 12:48:29,001 INFO L273 TraceCheckUtils]: 66: Hoare triple {29801#false} assume !false; {29801#false} is VALID [2018-11-23 12:48:29,001 INFO L273 TraceCheckUtils]: 67: Hoare triple {29801#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,001 INFO L273 TraceCheckUtils]: 68: Hoare triple {29801#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,001 INFO L273 TraceCheckUtils]: 69: Hoare triple {29801#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,002 INFO L273 TraceCheckUtils]: 70: Hoare triple {29801#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,002 INFO L273 TraceCheckUtils]: 71: Hoare triple {29801#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,002 INFO L273 TraceCheckUtils]: 72: Hoare triple {29801#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,002 INFO L273 TraceCheckUtils]: 73: Hoare triple {29801#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,002 INFO L273 TraceCheckUtils]: 74: Hoare triple {29801#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,003 INFO L273 TraceCheckUtils]: 75: Hoare triple {29801#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,003 INFO L273 TraceCheckUtils]: 76: Hoare triple {29801#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,003 INFO L273 TraceCheckUtils]: 77: Hoare triple {29801#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,003 INFO L273 TraceCheckUtils]: 78: Hoare triple {29801#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,003 INFO L273 TraceCheckUtils]: 79: Hoare triple {29801#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 80: Hoare triple {29801#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 81: Hoare triple {29801#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 82: Hoare triple {29801#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 83: Hoare triple {29801#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 84: Hoare triple {29801#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 85: Hoare triple {29801#false} assume 8544 == #t~mem41;havoc #t~mem41; {29801#false} is VALID [2018-11-23 12:48:29,004 INFO L273 TraceCheckUtils]: 86: Hoare triple {29801#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 87: Hoare triple {29801#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 88: Hoare triple {29801#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 89: Hoare triple {29801#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 90: Hoare triple {29801#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 91: Hoare triple {29801#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 92: Hoare triple {29801#false} assume 7 == ~blastFlag~0; {29801#false} is VALID [2018-11-23 12:48:29,005 INFO L273 TraceCheckUtils]: 93: Hoare triple {29801#false} assume !false; {29801#false} is VALID [2018-11-23 12:48:29,011 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:29,011 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:29,012 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:29,012 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:29,012 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:29,012 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:29,092 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:29,092 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:29,092 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:29,092 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:29,093 INFO L87 Difference]: Start difference. First operand 260 states and 391 transitions. Second operand 4 states. [2018-11-23 12:48:30,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:30,417 INFO L93 Difference]: Finished difference Result 540 states and 813 transitions. [2018-11-23 12:48:30,417 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:30,417 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:30,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:30,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:30,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:48:30,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:30,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 538 transitions. [2018-11-23 12:48:30,422 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 538 transitions. [2018-11-23 12:48:30,943 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 538 edges. 538 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:30,949 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:30,949 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:30,950 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:30,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:31,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:31,037 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:31,037 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:31,038 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:31,038 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:31,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:31,044 INFO L93 Difference]: Finished difference Result 305 states and 449 transitions. [2018-11-23 12:48:31,044 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 449 transitions. [2018-11-23 12:48:31,044 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:31,045 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:31,045 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:31,045 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:31,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:31,050 INFO L93 Difference]: Finished difference Result 305 states and 449 transitions. [2018-11-23 12:48:31,050 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 449 transitions. [2018-11-23 12:48:31,051 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:31,051 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:31,051 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:31,051 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:31,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:31,055 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 390 transitions. [2018-11-23 12:48:31,056 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 390 transitions. Word has length 94 [2018-11-23 12:48:31,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:31,056 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 390 transitions. [2018-11-23 12:48:31,056 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:31,056 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 390 transitions. [2018-11-23 12:48:31,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:31,057 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:31,057 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:31,057 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:31,058 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:31,058 INFO L82 PathProgramCache]: Analyzing trace with hash -333397817, now seen corresponding path program 1 times [2018-11-23 12:48:31,058 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:31,058 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:31,059 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:31,059 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:31,059 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:31,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:31,257 INFO L256 TraceCheckUtils]: 0: Hoare triple {31340#true} call ULTIMATE.init(); {31340#true} is VALID [2018-11-23 12:48:31,258 INFO L273 TraceCheckUtils]: 1: Hoare triple {31340#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,258 INFO L273 TraceCheckUtils]: 2: Hoare triple {31340#true} assume true; {31340#true} is VALID [2018-11-23 12:48:31,258 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {31340#true} {31340#true} #633#return; {31340#true} is VALID [2018-11-23 12:48:31,258 INFO L256 TraceCheckUtils]: 4: Hoare triple {31340#true} call #t~ret138 := main(); {31340#true} is VALID [2018-11-23 12:48:31,259 INFO L273 TraceCheckUtils]: 5: Hoare triple {31340#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,259 INFO L256 TraceCheckUtils]: 6: Hoare triple {31340#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {31340#true} is VALID [2018-11-23 12:48:31,259 INFO L273 TraceCheckUtils]: 7: Hoare triple {31340#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,259 INFO L273 TraceCheckUtils]: 8: Hoare triple {31340#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {31340#true} is VALID [2018-11-23 12:48:31,259 INFO L273 TraceCheckUtils]: 9: Hoare triple {31340#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 10: Hoare triple {31340#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 11: Hoare triple {31340#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 12: Hoare triple {31340#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 13: Hoare triple {31340#true} assume !false; {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 14: Hoare triple {31340#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 15: Hoare triple {31340#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 16: Hoare triple {31340#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 17: Hoare triple {31340#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,260 INFO L273 TraceCheckUtils]: 18: Hoare triple {31340#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 19: Hoare triple {31340#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 20: Hoare triple {31340#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 21: Hoare triple {31340#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 22: Hoare triple {31340#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 23: Hoare triple {31340#true} assume 8464 == #t~mem32;havoc #t~mem32; {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 24: Hoare triple {31340#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 25: Hoare triple {31340#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {31340#true} is VALID [2018-11-23 12:48:31,261 INFO L273 TraceCheckUtils]: 26: Hoare triple {31340#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 27: Hoare triple {31340#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 28: Hoare triple {31340#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 29: Hoare triple {31340#true} ~skip~0 := 0; {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 30: Hoare triple {31340#true} assume !false; {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 31: Hoare triple {31340#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 32: Hoare triple {31340#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 33: Hoare triple {31340#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 34: Hoare triple {31340#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,262 INFO L273 TraceCheckUtils]: 35: Hoare triple {31340#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 36: Hoare triple {31340#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 37: Hoare triple {31340#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 38: Hoare triple {31340#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 39: Hoare triple {31340#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 40: Hoare triple {31340#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 41: Hoare triple {31340#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 42: Hoare triple {31340#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,263 INFO L273 TraceCheckUtils]: 43: Hoare triple {31340#true} assume 8496 == #t~mem35;havoc #t~mem35; {31340#true} is VALID [2018-11-23 12:48:31,264 INFO L273 TraceCheckUtils]: 44: Hoare triple {31340#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {31340#true} is VALID [2018-11-23 12:48:31,264 INFO L273 TraceCheckUtils]: 45: Hoare triple {31340#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {31340#true} is VALID [2018-11-23 12:48:31,264 INFO L273 TraceCheckUtils]: 46: Hoare triple {31340#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {31340#true} is VALID [2018-11-23 12:48:31,265 INFO L273 TraceCheckUtils]: 47: Hoare triple {31340#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,265 INFO L273 TraceCheckUtils]: 48: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,266 INFO L273 TraceCheckUtils]: 49: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,266 INFO L273 TraceCheckUtils]: 50: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,266 INFO L273 TraceCheckUtils]: 51: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,267 INFO L273 TraceCheckUtils]: 52: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,267 INFO L273 TraceCheckUtils]: 53: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,267 INFO L273 TraceCheckUtils]: 54: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,268 INFO L273 TraceCheckUtils]: 55: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,268 INFO L273 TraceCheckUtils]: 56: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,269 INFO L273 TraceCheckUtils]: 57: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,269 INFO L273 TraceCheckUtils]: 58: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:31,270 INFO L273 TraceCheckUtils]: 59: Hoare triple {31342#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31343#(= 8512 |ssl3_accept_#t~mem30|)} is VALID [2018-11-23 12:48:31,270 INFO L273 TraceCheckUtils]: 60: Hoare triple {31343#(= 8512 |ssl3_accept_#t~mem30|)} assume 8481 == #t~mem30;havoc #t~mem30; {31341#false} is VALID [2018-11-23 12:48:31,271 INFO L273 TraceCheckUtils]: 61: Hoare triple {31341#false} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; {31341#false} is VALID [2018-11-23 12:48:31,271 INFO L273 TraceCheckUtils]: 62: Hoare triple {31341#false} assume !(~ret~0 <= 0);call #t~mem68.base, #t~mem68.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(8482, #t~mem68.base, 844 + #t~mem68.offset, 4);havoc #t~mem68.base, #t~mem68.offset;call write~int(8448, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,271 INFO L273 TraceCheckUtils]: 63: Hoare triple {31341#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,271 INFO L273 TraceCheckUtils]: 64: Hoare triple {31341#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {31341#false} is VALID [2018-11-23 12:48:31,272 INFO L273 TraceCheckUtils]: 65: Hoare triple {31341#false} ~skip~0 := 0; {31341#false} is VALID [2018-11-23 12:48:31,272 INFO L273 TraceCheckUtils]: 66: Hoare triple {31341#false} assume !false; {31341#false} is VALID [2018-11-23 12:48:31,272 INFO L273 TraceCheckUtils]: 67: Hoare triple {31341#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,272 INFO L273 TraceCheckUtils]: 68: Hoare triple {31341#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,272 INFO L273 TraceCheckUtils]: 69: Hoare triple {31341#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,272 INFO L273 TraceCheckUtils]: 70: Hoare triple {31341#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,273 INFO L273 TraceCheckUtils]: 71: Hoare triple {31341#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,273 INFO L273 TraceCheckUtils]: 72: Hoare triple {31341#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,273 INFO L273 TraceCheckUtils]: 73: Hoare triple {31341#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,273 INFO L273 TraceCheckUtils]: 74: Hoare triple {31341#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,273 INFO L273 TraceCheckUtils]: 75: Hoare triple {31341#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 76: Hoare triple {31341#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 77: Hoare triple {31341#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 78: Hoare triple {31341#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 79: Hoare triple {31341#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 80: Hoare triple {31341#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 81: Hoare triple {31341#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 82: Hoare triple {31341#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 83: Hoare triple {31341#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,274 INFO L273 TraceCheckUtils]: 84: Hoare triple {31341#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,275 INFO L273 TraceCheckUtils]: 85: Hoare triple {31341#false} assume 8544 == #t~mem41;havoc #t~mem41; {31341#false} is VALID [2018-11-23 12:48:31,275 INFO L273 TraceCheckUtils]: 86: Hoare triple {31341#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,275 INFO L273 TraceCheckUtils]: 87: Hoare triple {31341#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,275 INFO L273 TraceCheckUtils]: 88: Hoare triple {31341#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {31341#false} is VALID [2018-11-23 12:48:31,275 INFO L273 TraceCheckUtils]: 89: Hoare triple {31341#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {31341#false} is VALID [2018-11-23 12:48:31,275 INFO L273 TraceCheckUtils]: 90: Hoare triple {31341#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {31341#false} is VALID [2018-11-23 12:48:31,276 INFO L273 TraceCheckUtils]: 91: Hoare triple {31341#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {31341#false} is VALID [2018-11-23 12:48:31,276 INFO L273 TraceCheckUtils]: 92: Hoare triple {31341#false} assume 7 == ~blastFlag~0; {31341#false} is VALID [2018-11-23 12:48:31,276 INFO L273 TraceCheckUtils]: 93: Hoare triple {31341#false} assume !false; {31341#false} is VALID [2018-11-23 12:48:31,283 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:31,284 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:31,284 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:31,284 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:31,285 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:31,285 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:31,407 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:31,408 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:31,408 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:31,408 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:31,408 INFO L87 Difference]: Start difference. First operand 260 states and 390 transitions. Second operand 4 states. [2018-11-23 12:48:32,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:32,847 INFO L93 Difference]: Finished difference Result 518 states and 782 transitions. [2018-11-23 12:48:32,847 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:32,847 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:32,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:32,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:32,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 480 transitions. [2018-11-23 12:48:32,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:32,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 480 transitions. [2018-11-23 12:48:32,852 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 480 transitions. [2018-11-23 12:48:33,321 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 480 edges. 480 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:33,328 INFO L225 Difference]: With dead ends: 518 [2018-11-23 12:48:33,328 INFO L226 Difference]: Without dead ends: 283 [2018-11-23 12:48:33,329 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:33,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2018-11-23 12:48:33,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 260. [2018-11-23 12:48:33,477 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:33,477 INFO L82 GeneralOperation]: Start isEquivalent. First operand 283 states. Second operand 260 states. [2018-11-23 12:48:33,477 INFO L74 IsIncluded]: Start isIncluded. First operand 283 states. Second operand 260 states. [2018-11-23 12:48:33,477 INFO L87 Difference]: Start difference. First operand 283 states. Second operand 260 states. [2018-11-23 12:48:33,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:33,482 INFO L93 Difference]: Finished difference Result 283 states and 419 transitions. [2018-11-23 12:48:33,482 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 419 transitions. [2018-11-23 12:48:33,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:33,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:33,483 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 283 states. [2018-11-23 12:48:33,483 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 283 states. [2018-11-23 12:48:33,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:33,489 INFO L93 Difference]: Finished difference Result 283 states and 419 transitions. [2018-11-23 12:48:33,489 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 419 transitions. [2018-11-23 12:48:33,489 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:33,490 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:33,490 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:33,490 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:33,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:33,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 389 transitions. [2018-11-23 12:48:33,496 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 389 transitions. Word has length 94 [2018-11-23 12:48:33,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:33,496 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 389 transitions. [2018-11-23 12:48:33,496 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:33,496 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 389 transitions. [2018-11-23 12:48:33,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2018-11-23 12:48:33,497 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:33,497 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:33,497 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:33,497 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:33,498 INFO L82 PathProgramCache]: Analyzing trace with hash -1976929272, now seen corresponding path program 1 times [2018-11-23 12:48:33,498 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:33,498 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:33,499 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:33,499 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:33,499 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:33,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:33,681 INFO L256 TraceCheckUtils]: 0: Hoare triple {32807#true} call ULTIMATE.init(); {32807#true} is VALID [2018-11-23 12:48:33,681 INFO L273 TraceCheckUtils]: 1: Hoare triple {32807#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,682 INFO L273 TraceCheckUtils]: 2: Hoare triple {32807#true} assume true; {32807#true} is VALID [2018-11-23 12:48:33,682 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {32807#true} {32807#true} #633#return; {32807#true} is VALID [2018-11-23 12:48:33,682 INFO L256 TraceCheckUtils]: 4: Hoare triple {32807#true} call #t~ret138 := main(); {32807#true} is VALID [2018-11-23 12:48:33,682 INFO L273 TraceCheckUtils]: 5: Hoare triple {32807#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L256 TraceCheckUtils]: 6: Hoare triple {32807#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L273 TraceCheckUtils]: 7: Hoare triple {32807#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L273 TraceCheckUtils]: 8: Hoare triple {32807#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L273 TraceCheckUtils]: 9: Hoare triple {32807#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L273 TraceCheckUtils]: 10: Hoare triple {32807#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L273 TraceCheckUtils]: 11: Hoare triple {32807#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,683 INFO L273 TraceCheckUtils]: 12: Hoare triple {32807#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 13: Hoare triple {32807#true} assume !false; {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 14: Hoare triple {32807#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 15: Hoare triple {32807#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 16: Hoare triple {32807#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 17: Hoare triple {32807#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 18: Hoare triple {32807#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 19: Hoare triple {32807#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 20: Hoare triple {32807#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,684 INFO L273 TraceCheckUtils]: 21: Hoare triple {32807#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 22: Hoare triple {32807#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 23: Hoare triple {32807#true} assume 8464 == #t~mem32;havoc #t~mem32; {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 24: Hoare triple {32807#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 25: Hoare triple {32807#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 26: Hoare triple {32807#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 27: Hoare triple {32807#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 28: Hoare triple {32807#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32807#true} is VALID [2018-11-23 12:48:33,685 INFO L273 TraceCheckUtils]: 29: Hoare triple {32807#true} ~skip~0 := 0; {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 30: Hoare triple {32807#true} assume !false; {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 31: Hoare triple {32807#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 32: Hoare triple {32807#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 33: Hoare triple {32807#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 34: Hoare triple {32807#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 35: Hoare triple {32807#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 36: Hoare triple {32807#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 37: Hoare triple {32807#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,686 INFO L273 TraceCheckUtils]: 38: Hoare triple {32807#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 39: Hoare triple {32807#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 40: Hoare triple {32807#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 41: Hoare triple {32807#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 42: Hoare triple {32807#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 43: Hoare triple {32807#true} assume 8496 == #t~mem35;havoc #t~mem35; {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 44: Hoare triple {32807#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 45: Hoare triple {32807#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {32807#true} is VALID [2018-11-23 12:48:33,687 INFO L273 TraceCheckUtils]: 46: Hoare triple {32807#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {32807#true} is VALID [2018-11-23 12:48:33,688 INFO L273 TraceCheckUtils]: 47: Hoare triple {32807#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,689 INFO L273 TraceCheckUtils]: 48: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,693 INFO L273 TraceCheckUtils]: 49: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,693 INFO L273 TraceCheckUtils]: 50: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,694 INFO L273 TraceCheckUtils]: 51: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,694 INFO L273 TraceCheckUtils]: 52: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,694 INFO L273 TraceCheckUtils]: 53: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,695 INFO L273 TraceCheckUtils]: 54: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,695 INFO L273 TraceCheckUtils]: 55: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,695 INFO L273 TraceCheckUtils]: 56: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,696 INFO L273 TraceCheckUtils]: 57: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,696 INFO L273 TraceCheckUtils]: 58: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,697 INFO L273 TraceCheckUtils]: 59: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:33,697 INFO L273 TraceCheckUtils]: 60: Hoare triple {32809#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32810#(= 8512 |ssl3_accept_#t~mem31|)} is VALID [2018-11-23 12:48:33,698 INFO L273 TraceCheckUtils]: 61: Hoare triple {32810#(= 8512 |ssl3_accept_#t~mem31|)} assume 8482 == #t~mem31;havoc #t~mem31; {32808#false} is VALID [2018-11-23 12:48:33,698 INFO L273 TraceCheckUtils]: 62: Hoare triple {32808#false} call write~int(3, ~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,698 INFO L273 TraceCheckUtils]: 63: Hoare triple {32808#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,698 INFO L273 TraceCheckUtils]: 64: Hoare triple {32808#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {32808#false} is VALID [2018-11-23 12:48:33,699 INFO L273 TraceCheckUtils]: 65: Hoare triple {32808#false} ~skip~0 := 0; {32808#false} is VALID [2018-11-23 12:48:33,699 INFO L273 TraceCheckUtils]: 66: Hoare triple {32808#false} assume !false; {32808#false} is VALID [2018-11-23 12:48:33,699 INFO L273 TraceCheckUtils]: 67: Hoare triple {32808#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,699 INFO L273 TraceCheckUtils]: 68: Hoare triple {32808#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,699 INFO L273 TraceCheckUtils]: 69: Hoare triple {32808#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,700 INFO L273 TraceCheckUtils]: 70: Hoare triple {32808#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,700 INFO L273 TraceCheckUtils]: 71: Hoare triple {32808#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,700 INFO L273 TraceCheckUtils]: 72: Hoare triple {32808#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,700 INFO L273 TraceCheckUtils]: 73: Hoare triple {32808#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,700 INFO L273 TraceCheckUtils]: 74: Hoare triple {32808#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,700 INFO L273 TraceCheckUtils]: 75: Hoare triple {32808#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 76: Hoare triple {32808#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 77: Hoare triple {32808#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 78: Hoare triple {32808#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 79: Hoare triple {32808#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 80: Hoare triple {32808#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 81: Hoare triple {32808#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,701 INFO L273 TraceCheckUtils]: 82: Hoare triple {32808#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 83: Hoare triple {32808#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 84: Hoare triple {32808#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 85: Hoare triple {32808#false} assume 8544 == #t~mem41;havoc #t~mem41; {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 86: Hoare triple {32808#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 87: Hoare triple {32808#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 88: Hoare triple {32808#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 89: Hoare triple {32808#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 90: Hoare triple {32808#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {32808#false} is VALID [2018-11-23 12:48:33,702 INFO L273 TraceCheckUtils]: 91: Hoare triple {32808#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {32808#false} is VALID [2018-11-23 12:48:33,703 INFO L273 TraceCheckUtils]: 92: Hoare triple {32808#false} assume 7 == ~blastFlag~0; {32808#false} is VALID [2018-11-23 12:48:33,703 INFO L273 TraceCheckUtils]: 93: Hoare triple {32808#false} assume !false; {32808#false} is VALID [2018-11-23 12:48:33,709 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:33,709 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:33,709 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:33,709 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:33,710 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:33,710 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:33,793 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:33,793 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:33,794 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:33,794 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:33,794 INFO L87 Difference]: Start difference. First operand 260 states and 389 transitions. Second operand 4 states. [2018-11-23 12:48:35,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:35,002 INFO L93 Difference]: Finished difference Result 517 states and 779 transitions. [2018-11-23 12:48:35,003 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:35,003 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 94 [2018-11-23 12:48:35,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:35,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:35,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-23 12:48:35,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:35,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 478 transitions. [2018-11-23 12:48:35,007 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 478 transitions. [2018-11-23 12:48:35,454 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 478 edges. 478 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:35,460 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:35,461 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:35,461 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:35,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:35,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:35,635 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:35,636 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:35,636 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:35,636 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:35,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:35,641 INFO L93 Difference]: Finished difference Result 282 states and 417 transitions. [2018-11-23 12:48:35,641 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 417 transitions. [2018-11-23 12:48:35,642 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:35,642 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:35,642 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:35,642 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:35,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:35,647 INFO L93 Difference]: Finished difference Result 282 states and 417 transitions. [2018-11-23 12:48:35,647 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 417 transitions. [2018-11-23 12:48:35,648 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:35,648 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:35,648 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:35,648 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:35,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:35,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 388 transitions. [2018-11-23 12:48:35,652 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 388 transitions. Word has length 94 [2018-11-23 12:48:35,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:35,653 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 388 transitions. [2018-11-23 12:48:35,653 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:35,653 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 388 transitions. [2018-11-23 12:48:35,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 12:48:35,653 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:35,653 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:35,654 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:35,654 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:35,654 INFO L82 PathProgramCache]: Analyzing trace with hash 1211983539, now seen corresponding path program 1 times [2018-11-23 12:48:35,654 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:35,654 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:35,655 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:35,655 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:35,655 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:35,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:35,881 INFO L256 TraceCheckUtils]: 0: Hoare triple {34270#true} call ULTIMATE.init(); {34270#true} is VALID [2018-11-23 12:48:35,881 INFO L273 TraceCheckUtils]: 1: Hoare triple {34270#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,882 INFO L273 TraceCheckUtils]: 2: Hoare triple {34270#true} assume true; {34270#true} is VALID [2018-11-23 12:48:35,882 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {34270#true} {34270#true} #633#return; {34270#true} is VALID [2018-11-23 12:48:35,882 INFO L256 TraceCheckUtils]: 4: Hoare triple {34270#true} call #t~ret138 := main(); {34270#true} is VALID [2018-11-23 12:48:35,882 INFO L273 TraceCheckUtils]: 5: Hoare triple {34270#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,882 INFO L256 TraceCheckUtils]: 6: Hoare triple {34270#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {34270#true} is VALID [2018-11-23 12:48:35,883 INFO L273 TraceCheckUtils]: 7: Hoare triple {34270#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,883 INFO L273 TraceCheckUtils]: 8: Hoare triple {34270#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {34270#true} is VALID [2018-11-23 12:48:35,883 INFO L273 TraceCheckUtils]: 9: Hoare triple {34270#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {34270#true} is VALID [2018-11-23 12:48:35,883 INFO L273 TraceCheckUtils]: 10: Hoare triple {34270#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {34270#true} is VALID [2018-11-23 12:48:35,884 INFO L273 TraceCheckUtils]: 11: Hoare triple {34270#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,884 INFO L273 TraceCheckUtils]: 12: Hoare triple {34270#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {34270#true} is VALID [2018-11-23 12:48:35,884 INFO L273 TraceCheckUtils]: 13: Hoare triple {34270#true} assume !false; {34270#true} is VALID [2018-11-23 12:48:35,884 INFO L273 TraceCheckUtils]: 14: Hoare triple {34270#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 15: Hoare triple {34270#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 16: Hoare triple {34270#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 17: Hoare triple {34270#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 18: Hoare triple {34270#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 19: Hoare triple {34270#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 20: Hoare triple {34270#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,885 INFO L273 TraceCheckUtils]: 21: Hoare triple {34270#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 22: Hoare triple {34270#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 23: Hoare triple {34270#true} assume 8464 == #t~mem32;havoc #t~mem32; {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 24: Hoare triple {34270#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 25: Hoare triple {34270#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 26: Hoare triple {34270#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 27: Hoare triple {34270#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 28: Hoare triple {34270#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 29: Hoare triple {34270#true} ~skip~0 := 0; {34270#true} is VALID [2018-11-23 12:48:35,886 INFO L273 TraceCheckUtils]: 30: Hoare triple {34270#true} assume !false; {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 31: Hoare triple {34270#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 32: Hoare triple {34270#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 33: Hoare triple {34270#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 34: Hoare triple {34270#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 35: Hoare triple {34270#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 36: Hoare triple {34270#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 37: Hoare triple {34270#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 38: Hoare triple {34270#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,887 INFO L273 TraceCheckUtils]: 39: Hoare triple {34270#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 40: Hoare triple {34270#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 41: Hoare triple {34270#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 42: Hoare triple {34270#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 43: Hoare triple {34270#true} assume 8496 == #t~mem35;havoc #t~mem35; {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 44: Hoare triple {34270#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 45: Hoare triple {34270#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {34270#true} is VALID [2018-11-23 12:48:35,888 INFO L273 TraceCheckUtils]: 46: Hoare triple {34270#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {34270#true} is VALID [2018-11-23 12:48:35,889 INFO L273 TraceCheckUtils]: 47: Hoare triple {34270#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,890 INFO L273 TraceCheckUtils]: 48: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,890 INFO L273 TraceCheckUtils]: 49: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,891 INFO L273 TraceCheckUtils]: 50: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,891 INFO L273 TraceCheckUtils]: 51: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} ~skip~0 := 0; {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,891 INFO L273 TraceCheckUtils]: 52: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !false; {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,892 INFO L273 TraceCheckUtils]: 53: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} is VALID [2018-11-23 12:48:35,893 INFO L273 TraceCheckUtils]: 54: Hoare triple {34272#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8656)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34273#(= |ssl3_accept_#t~mem25| 8656)} is VALID [2018-11-23 12:48:35,893 INFO L273 TraceCheckUtils]: 55: Hoare triple {34273#(= |ssl3_accept_#t~mem25| 8656)} assume 16384 == #t~mem25;havoc #t~mem25; {34271#false} is VALID [2018-11-23 12:48:35,894 INFO L273 TraceCheckUtils]: 56: Hoare triple {34271#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,894 INFO L273 TraceCheckUtils]: 57: Hoare triple {34271#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {34271#false} is VALID [2018-11-23 12:48:35,894 INFO L273 TraceCheckUtils]: 58: Hoare triple {34271#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,894 INFO L273 TraceCheckUtils]: 59: Hoare triple {34271#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,894 INFO L273 TraceCheckUtils]: 60: Hoare triple {34271#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {34271#false} is VALID [2018-11-23 12:48:35,895 INFO L273 TraceCheckUtils]: 61: Hoare triple {34271#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,895 INFO L273 TraceCheckUtils]: 62: Hoare triple {34271#false} assume 12292 != #t~mem62;havoc #t~mem62; {34271#false} is VALID [2018-11-23 12:48:35,895 INFO L273 TraceCheckUtils]: 63: Hoare triple {34271#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {34271#false} is VALID [2018-11-23 12:48:35,895 INFO L273 TraceCheckUtils]: 64: Hoare triple {34271#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,895 INFO L273 TraceCheckUtils]: 65: Hoare triple {34271#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {34271#false} is VALID [2018-11-23 12:48:35,896 INFO L273 TraceCheckUtils]: 66: Hoare triple {34271#false} ~skip~0 := 0; {34271#false} is VALID [2018-11-23 12:48:35,896 INFO L273 TraceCheckUtils]: 67: Hoare triple {34271#false} assume !false; {34271#false} is VALID [2018-11-23 12:48:35,896 INFO L273 TraceCheckUtils]: 68: Hoare triple {34271#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,896 INFO L273 TraceCheckUtils]: 69: Hoare triple {34271#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,896 INFO L273 TraceCheckUtils]: 70: Hoare triple {34271#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 71: Hoare triple {34271#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 72: Hoare triple {34271#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 73: Hoare triple {34271#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 74: Hoare triple {34271#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 75: Hoare triple {34271#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 76: Hoare triple {34271#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,897 INFO L273 TraceCheckUtils]: 77: Hoare triple {34271#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 78: Hoare triple {34271#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 79: Hoare triple {34271#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 80: Hoare triple {34271#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 81: Hoare triple {34271#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 82: Hoare triple {34271#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 83: Hoare triple {34271#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 84: Hoare triple {34271#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 85: Hoare triple {34271#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,898 INFO L273 TraceCheckUtils]: 86: Hoare triple {34271#false} assume 8544 == #t~mem41;havoc #t~mem41; {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 87: Hoare triple {34271#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 88: Hoare triple {34271#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 89: Hoare triple {34271#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 90: Hoare triple {34271#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 91: Hoare triple {34271#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 92: Hoare triple {34271#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 93: Hoare triple {34271#false} assume 7 == ~blastFlag~0; {34271#false} is VALID [2018-11-23 12:48:35,899 INFO L273 TraceCheckUtils]: 94: Hoare triple {34271#false} assume !false; {34271#false} is VALID [2018-11-23 12:48:35,904 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:35,904 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:35,904 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:35,905 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:35,905 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:35,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:35,991 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:35,991 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:35,991 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:35,992 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:35,992 INFO L87 Difference]: Start difference. First operand 260 states and 388 transitions. Second operand 4 states. [2018-11-23 12:48:37,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:37,386 INFO L93 Difference]: Finished difference Result 540 states and 807 transitions. [2018-11-23 12:48:37,386 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:37,386 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:37,387 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:37,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:37,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 537 transitions. [2018-11-23 12:48:37,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:37,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 537 transitions. [2018-11-23 12:48:37,391 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 537 transitions. [2018-11-23 12:48:38,050 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 537 edges. 537 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:38,057 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:38,057 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:38,058 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:38,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:38,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:38,152 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:38,152 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:38,152 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:38,152 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:38,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:38,158 INFO L93 Difference]: Finished difference Result 305 states and 446 transitions. [2018-11-23 12:48:38,159 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 446 transitions. [2018-11-23 12:48:38,159 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:38,159 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:38,159 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:38,159 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:38,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:38,166 INFO L93 Difference]: Finished difference Result 305 states and 446 transitions. [2018-11-23 12:48:38,166 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 446 transitions. [2018-11-23 12:48:38,167 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:38,167 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:38,167 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:38,167 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:38,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:38,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 387 transitions. [2018-11-23 12:48:38,173 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 387 transitions. Word has length 95 [2018-11-23 12:48:38,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:38,173 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 387 transitions. [2018-11-23 12:48:38,173 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:38,174 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 387 transitions. [2018-11-23 12:48:38,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2018-11-23 12:48:38,174 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:38,175 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:38,175 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:38,175 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:38,175 INFO L82 PathProgramCache]: Analyzing trace with hash -1143821711, now seen corresponding path program 1 times [2018-11-23 12:48:38,175 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:38,175 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:38,176 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:38,176 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:38,176 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:38,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:38,351 INFO L256 TraceCheckUtils]: 0: Hoare triple {35810#true} call ULTIMATE.init(); {35810#true} is VALID [2018-11-23 12:48:38,351 INFO L273 TraceCheckUtils]: 1: Hoare triple {35810#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,351 INFO L273 TraceCheckUtils]: 2: Hoare triple {35810#true} assume true; {35810#true} is VALID [2018-11-23 12:48:38,352 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {35810#true} {35810#true} #633#return; {35810#true} is VALID [2018-11-23 12:48:38,352 INFO L256 TraceCheckUtils]: 4: Hoare triple {35810#true} call #t~ret138 := main(); {35810#true} is VALID [2018-11-23 12:48:38,352 INFO L273 TraceCheckUtils]: 5: Hoare triple {35810#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,352 INFO L256 TraceCheckUtils]: 6: Hoare triple {35810#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {35810#true} is VALID [2018-11-23 12:48:38,352 INFO L273 TraceCheckUtils]: 7: Hoare triple {35810#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,353 INFO L273 TraceCheckUtils]: 8: Hoare triple {35810#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {35810#true} is VALID [2018-11-23 12:48:38,353 INFO L273 TraceCheckUtils]: 9: Hoare triple {35810#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {35810#true} is VALID [2018-11-23 12:48:38,353 INFO L273 TraceCheckUtils]: 10: Hoare triple {35810#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {35810#true} is VALID [2018-11-23 12:48:38,353 INFO L273 TraceCheckUtils]: 11: Hoare triple {35810#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,353 INFO L273 TraceCheckUtils]: 12: Hoare triple {35810#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 13: Hoare triple {35810#true} assume !false; {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 14: Hoare triple {35810#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 15: Hoare triple {35810#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 16: Hoare triple {35810#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 17: Hoare triple {35810#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 18: Hoare triple {35810#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 19: Hoare triple {35810#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,354 INFO L273 TraceCheckUtils]: 20: Hoare triple {35810#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 21: Hoare triple {35810#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 22: Hoare triple {35810#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 23: Hoare triple {35810#true} assume 8464 == #t~mem32;havoc #t~mem32; {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 24: Hoare triple {35810#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 25: Hoare triple {35810#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 26: Hoare triple {35810#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 27: Hoare triple {35810#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 28: Hoare triple {35810#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35810#true} is VALID [2018-11-23 12:48:38,355 INFO L273 TraceCheckUtils]: 29: Hoare triple {35810#true} ~skip~0 := 0; {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 30: Hoare triple {35810#true} assume !false; {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 31: Hoare triple {35810#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 32: Hoare triple {35810#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 33: Hoare triple {35810#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 34: Hoare triple {35810#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 35: Hoare triple {35810#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 36: Hoare triple {35810#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,356 INFO L273 TraceCheckUtils]: 37: Hoare triple {35810#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 38: Hoare triple {35810#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 39: Hoare triple {35810#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 40: Hoare triple {35810#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 41: Hoare triple {35810#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 42: Hoare triple {35810#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 43: Hoare triple {35810#true} assume 8496 == #t~mem35;havoc #t~mem35; {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 44: Hoare triple {35810#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 45: Hoare triple {35810#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {35810#true} is VALID [2018-11-23 12:48:38,357 INFO L273 TraceCheckUtils]: 46: Hoare triple {35810#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {35810#true} is VALID [2018-11-23 12:48:38,358 INFO L273 TraceCheckUtils]: 47: Hoare triple {35810#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,359 INFO L273 TraceCheckUtils]: 48: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,359 INFO L273 TraceCheckUtils]: 49: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,360 INFO L273 TraceCheckUtils]: 50: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,360 INFO L273 TraceCheckUtils]: 51: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} ~skip~0 := 0; {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,360 INFO L273 TraceCheckUtils]: 52: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !false; {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,361 INFO L273 TraceCheckUtils]: 53: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} is VALID [2018-11-23 12:48:38,361 INFO L273 TraceCheckUtils]: 54: Hoare triple {35812#(= (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)) 8512)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35813#(= |ssl3_accept_#t~mem25| 8512)} is VALID [2018-11-23 12:48:38,361 INFO L273 TraceCheckUtils]: 55: Hoare triple {35813#(= |ssl3_accept_#t~mem25| 8512)} assume 16384 == #t~mem25;havoc #t~mem25; {35811#false} is VALID [2018-11-23 12:48:38,362 INFO L273 TraceCheckUtils]: 56: Hoare triple {35811#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,362 INFO L273 TraceCheckUtils]: 57: Hoare triple {35811#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {35811#false} is VALID [2018-11-23 12:48:38,362 INFO L273 TraceCheckUtils]: 58: Hoare triple {35811#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,363 INFO L273 TraceCheckUtils]: 59: Hoare triple {35811#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,363 INFO L273 TraceCheckUtils]: 60: Hoare triple {35811#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {35811#false} is VALID [2018-11-23 12:48:38,363 INFO L273 TraceCheckUtils]: 61: Hoare triple {35811#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,363 INFO L273 TraceCheckUtils]: 62: Hoare triple {35811#false} assume 12292 != #t~mem62;havoc #t~mem62; {35811#false} is VALID [2018-11-23 12:48:38,364 INFO L273 TraceCheckUtils]: 63: Hoare triple {35811#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {35811#false} is VALID [2018-11-23 12:48:38,364 INFO L273 TraceCheckUtils]: 64: Hoare triple {35811#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,364 INFO L273 TraceCheckUtils]: 65: Hoare triple {35811#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {35811#false} is VALID [2018-11-23 12:48:38,364 INFO L273 TraceCheckUtils]: 66: Hoare triple {35811#false} ~skip~0 := 0; {35811#false} is VALID [2018-11-23 12:48:38,364 INFO L273 TraceCheckUtils]: 67: Hoare triple {35811#false} assume !false; {35811#false} is VALID [2018-11-23 12:48:38,364 INFO L273 TraceCheckUtils]: 68: Hoare triple {35811#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 69: Hoare triple {35811#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 70: Hoare triple {35811#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 71: Hoare triple {35811#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 72: Hoare triple {35811#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 73: Hoare triple {35811#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 74: Hoare triple {35811#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 75: Hoare triple {35811#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 76: Hoare triple {35811#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,365 INFO L273 TraceCheckUtils]: 77: Hoare triple {35811#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 78: Hoare triple {35811#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 79: Hoare triple {35811#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 80: Hoare triple {35811#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 81: Hoare triple {35811#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 82: Hoare triple {35811#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 83: Hoare triple {35811#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 84: Hoare triple {35811#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,366 INFO L273 TraceCheckUtils]: 85: Hoare triple {35811#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 86: Hoare triple {35811#false} assume 8544 == #t~mem41;havoc #t~mem41; {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 87: Hoare triple {35811#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 88: Hoare triple {35811#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 89: Hoare triple {35811#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 90: Hoare triple {35811#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 91: Hoare triple {35811#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 92: Hoare triple {35811#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 93: Hoare triple {35811#false} assume 7 == ~blastFlag~0; {35811#false} is VALID [2018-11-23 12:48:38,367 INFO L273 TraceCheckUtils]: 94: Hoare triple {35811#false} assume !false; {35811#false} is VALID [2018-11-23 12:48:38,372 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:38,372 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:38,372 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:38,373 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:38,373 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:38,373 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:38,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:38,453 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:38,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:38,453 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:38,454 INFO L87 Difference]: Start difference. First operand 260 states and 387 transitions. Second operand 4 states. [2018-11-23 12:48:39,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:39,674 INFO L93 Difference]: Finished difference Result 517 states and 775 transitions. [2018-11-23 12:48:39,674 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:39,674 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 95 [2018-11-23 12:48:39,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:39,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:39,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 477 transitions. [2018-11-23 12:48:39,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:39,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 477 transitions. [2018-11-23 12:48:39,678 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 477 transitions. [2018-11-23 12:48:40,129 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 477 edges. 477 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:40,134 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:40,135 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:40,135 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:40,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:40,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:40,308 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:40,309 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:40,309 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:40,309 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:40,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:40,314 INFO L93 Difference]: Finished difference Result 282 states and 415 transitions. [2018-11-23 12:48:40,314 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 415 transitions. [2018-11-23 12:48:40,315 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:40,315 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:40,315 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:40,315 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:40,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:40,320 INFO L93 Difference]: Finished difference Result 282 states and 415 transitions. [2018-11-23 12:48:40,320 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 415 transitions. [2018-11-23 12:48:40,320 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:40,320 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:40,320 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:40,320 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:40,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:40,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 386 transitions. [2018-11-23 12:48:40,325 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 386 transitions. Word has length 95 [2018-11-23 12:48:40,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:40,325 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 386 transitions. [2018-11-23 12:48:40,325 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:40,325 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 386 transitions. [2018-11-23 12:48:40,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 12:48:40,326 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:40,326 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:40,327 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:40,327 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:40,327 INFO L82 PathProgramCache]: Analyzing trace with hash 713781314, now seen corresponding path program 1 times [2018-11-23 12:48:40,327 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:40,327 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:40,328 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:40,328 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:40,329 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:40,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:40,528 INFO L256 TraceCheckUtils]: 0: Hoare triple {37273#true} call ULTIMATE.init(); {37273#true} is VALID [2018-11-23 12:48:40,528 INFO L273 TraceCheckUtils]: 1: Hoare triple {37273#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,528 INFO L273 TraceCheckUtils]: 2: Hoare triple {37273#true} assume true; {37273#true} is VALID [2018-11-23 12:48:40,528 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {37273#true} {37273#true} #633#return; {37273#true} is VALID [2018-11-23 12:48:40,529 INFO L256 TraceCheckUtils]: 4: Hoare triple {37273#true} call #t~ret138 := main(); {37273#true} is VALID [2018-11-23 12:48:40,529 INFO L273 TraceCheckUtils]: 5: Hoare triple {37273#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,529 INFO L256 TraceCheckUtils]: 6: Hoare triple {37273#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {37273#true} is VALID [2018-11-23 12:48:40,529 INFO L273 TraceCheckUtils]: 7: Hoare triple {37273#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,529 INFO L273 TraceCheckUtils]: 8: Hoare triple {37273#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {37273#true} is VALID [2018-11-23 12:48:40,530 INFO L273 TraceCheckUtils]: 9: Hoare triple {37273#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {37273#true} is VALID [2018-11-23 12:48:40,530 INFO L273 TraceCheckUtils]: 10: Hoare triple {37273#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {37273#true} is VALID [2018-11-23 12:48:40,530 INFO L273 TraceCheckUtils]: 11: Hoare triple {37273#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,530 INFO L273 TraceCheckUtils]: 12: Hoare triple {37273#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {37273#true} is VALID [2018-11-23 12:48:40,530 INFO L273 TraceCheckUtils]: 13: Hoare triple {37273#true} assume !false; {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 14: Hoare triple {37273#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 15: Hoare triple {37273#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 16: Hoare triple {37273#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 17: Hoare triple {37273#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 18: Hoare triple {37273#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 19: Hoare triple {37273#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 20: Hoare triple {37273#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,531 INFO L273 TraceCheckUtils]: 21: Hoare triple {37273#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 22: Hoare triple {37273#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 23: Hoare triple {37273#true} assume 8464 == #t~mem32;havoc #t~mem32; {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 24: Hoare triple {37273#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 25: Hoare triple {37273#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 26: Hoare triple {37273#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 27: Hoare triple {37273#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 28: Hoare triple {37273#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37273#true} is VALID [2018-11-23 12:48:40,532 INFO L273 TraceCheckUtils]: 29: Hoare triple {37273#true} ~skip~0 := 0; {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 30: Hoare triple {37273#true} assume !false; {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 31: Hoare triple {37273#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 32: Hoare triple {37273#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 33: Hoare triple {37273#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 34: Hoare triple {37273#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 35: Hoare triple {37273#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 36: Hoare triple {37273#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 37: Hoare triple {37273#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,533 INFO L273 TraceCheckUtils]: 38: Hoare triple {37273#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 39: Hoare triple {37273#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 40: Hoare triple {37273#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 41: Hoare triple {37273#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 42: Hoare triple {37273#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 43: Hoare triple {37273#true} assume 8496 == #t~mem35;havoc #t~mem35; {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 44: Hoare triple {37273#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 45: Hoare triple {37273#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {37273#true} is VALID [2018-11-23 12:48:40,534 INFO L273 TraceCheckUtils]: 46: Hoare triple {37273#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {37273#true} is VALID [2018-11-23 12:48:40,535 INFO L273 TraceCheckUtils]: 47: Hoare triple {37273#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,536 INFO L273 TraceCheckUtils]: 48: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,536 INFO L273 TraceCheckUtils]: 49: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,537 INFO L273 TraceCheckUtils]: 50: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,537 INFO L273 TraceCheckUtils]: 51: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,537 INFO L273 TraceCheckUtils]: 52: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,538 INFO L273 TraceCheckUtils]: 53: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,538 INFO L273 TraceCheckUtils]: 54: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:40,539 INFO L273 TraceCheckUtils]: 55: Hoare triple {37275#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37276#(= 8656 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:48:40,539 INFO L273 TraceCheckUtils]: 56: Hoare triple {37276#(= 8656 |ssl3_accept_#t~mem26|)} assume 8192 == #t~mem26;havoc #t~mem26; {37274#false} is VALID [2018-11-23 12:48:40,540 INFO L273 TraceCheckUtils]: 57: Hoare triple {37274#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,540 INFO L273 TraceCheckUtils]: 58: Hoare triple {37274#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {37274#false} is VALID [2018-11-23 12:48:40,540 INFO L273 TraceCheckUtils]: 59: Hoare triple {37274#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,540 INFO L273 TraceCheckUtils]: 60: Hoare triple {37274#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,540 INFO L273 TraceCheckUtils]: 61: Hoare triple {37274#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {37274#false} is VALID [2018-11-23 12:48:40,541 INFO L273 TraceCheckUtils]: 62: Hoare triple {37274#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,541 INFO L273 TraceCheckUtils]: 63: Hoare triple {37274#false} assume 12292 != #t~mem62;havoc #t~mem62; {37274#false} is VALID [2018-11-23 12:48:40,541 INFO L273 TraceCheckUtils]: 64: Hoare triple {37274#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {37274#false} is VALID [2018-11-23 12:48:40,541 INFO L273 TraceCheckUtils]: 65: Hoare triple {37274#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,541 INFO L273 TraceCheckUtils]: 66: Hoare triple {37274#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {37274#false} is VALID [2018-11-23 12:48:40,542 INFO L273 TraceCheckUtils]: 67: Hoare triple {37274#false} ~skip~0 := 0; {37274#false} is VALID [2018-11-23 12:48:40,542 INFO L273 TraceCheckUtils]: 68: Hoare triple {37274#false} assume !false; {37274#false} is VALID [2018-11-23 12:48:40,542 INFO L273 TraceCheckUtils]: 69: Hoare triple {37274#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,542 INFO L273 TraceCheckUtils]: 70: Hoare triple {37274#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,542 INFO L273 TraceCheckUtils]: 71: Hoare triple {37274#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 72: Hoare triple {37274#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 73: Hoare triple {37274#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 74: Hoare triple {37274#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 75: Hoare triple {37274#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 76: Hoare triple {37274#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 77: Hoare triple {37274#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 78: Hoare triple {37274#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,543 INFO L273 TraceCheckUtils]: 79: Hoare triple {37274#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 80: Hoare triple {37274#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 81: Hoare triple {37274#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 82: Hoare triple {37274#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 83: Hoare triple {37274#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 84: Hoare triple {37274#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 85: Hoare triple {37274#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 86: Hoare triple {37274#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 87: Hoare triple {37274#false} assume 8544 == #t~mem41;havoc #t~mem41; {37274#false} is VALID [2018-11-23 12:48:40,544 INFO L273 TraceCheckUtils]: 88: Hoare triple {37274#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 89: Hoare triple {37274#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 90: Hoare triple {37274#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 91: Hoare triple {37274#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 92: Hoare triple {37274#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 93: Hoare triple {37274#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 94: Hoare triple {37274#false} assume 7 == ~blastFlag~0; {37274#false} is VALID [2018-11-23 12:48:40,545 INFO L273 TraceCheckUtils]: 95: Hoare triple {37274#false} assume !false; {37274#false} is VALID [2018-11-23 12:48:40,550 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:40,550 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:40,551 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:40,551 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:40,551 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:40,551 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:40,633 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:40,633 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:40,634 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:40,634 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:40,634 INFO L87 Difference]: Start difference. First operand 260 states and 386 transitions. Second operand 4 states. [2018-11-23 12:48:42,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:42,027 INFO L93 Difference]: Finished difference Result 540 states and 803 transitions. [2018-11-23 12:48:42,027 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:42,027 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:42,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:42,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:42,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 536 transitions. [2018-11-23 12:48:42,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:42,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 536 transitions. [2018-11-23 12:48:42,031 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 536 transitions. [2018-11-23 12:48:42,558 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 536 edges. 536 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:42,565 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:42,565 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:42,566 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:42,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:43,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:43,065 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:43,065 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:43,065 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:43,065 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:43,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:43,071 INFO L93 Difference]: Finished difference Result 305 states and 444 transitions. [2018-11-23 12:48:43,071 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 444 transitions. [2018-11-23 12:48:43,071 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:43,071 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:43,072 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:43,072 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:43,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:43,077 INFO L93 Difference]: Finished difference Result 305 states and 444 transitions. [2018-11-23 12:48:43,077 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 444 transitions. [2018-11-23 12:48:43,077 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:43,078 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:43,078 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:43,078 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:43,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:43,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 385 transitions. [2018-11-23 12:48:43,082 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 385 transitions. Word has length 96 [2018-11-23 12:48:43,082 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:43,082 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 385 transitions. [2018-11-23 12:48:43,082 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:43,082 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 385 transitions. [2018-11-23 12:48:43,083 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 12:48:43,083 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:43,083 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:43,083 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:43,083 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:43,084 INFO L82 PathProgramCache]: Analyzing trace with hash 698262596, now seen corresponding path program 1 times [2018-11-23 12:48:43,084 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:43,084 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:43,085 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:43,085 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:43,085 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:43,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:43,244 INFO L256 TraceCheckUtils]: 0: Hoare triple {38813#true} call ULTIMATE.init(); {38813#true} is VALID [2018-11-23 12:48:43,244 INFO L273 TraceCheckUtils]: 1: Hoare triple {38813#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,245 INFO L273 TraceCheckUtils]: 2: Hoare triple {38813#true} assume true; {38813#true} is VALID [2018-11-23 12:48:43,245 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {38813#true} {38813#true} #633#return; {38813#true} is VALID [2018-11-23 12:48:43,245 INFO L256 TraceCheckUtils]: 4: Hoare triple {38813#true} call #t~ret138 := main(); {38813#true} is VALID [2018-11-23 12:48:43,245 INFO L273 TraceCheckUtils]: 5: Hoare triple {38813#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,245 INFO L256 TraceCheckUtils]: 6: Hoare triple {38813#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {38813#true} is VALID [2018-11-23 12:48:43,246 INFO L273 TraceCheckUtils]: 7: Hoare triple {38813#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,246 INFO L273 TraceCheckUtils]: 8: Hoare triple {38813#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {38813#true} is VALID [2018-11-23 12:48:43,246 INFO L273 TraceCheckUtils]: 9: Hoare triple {38813#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {38813#true} is VALID [2018-11-23 12:48:43,246 INFO L273 TraceCheckUtils]: 10: Hoare triple {38813#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {38813#true} is VALID [2018-11-23 12:48:43,246 INFO L273 TraceCheckUtils]: 11: Hoare triple {38813#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 12: Hoare triple {38813#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 13: Hoare triple {38813#true} assume !false; {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 14: Hoare triple {38813#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 15: Hoare triple {38813#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 16: Hoare triple {38813#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 17: Hoare triple {38813#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,247 INFO L273 TraceCheckUtils]: 18: Hoare triple {38813#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 19: Hoare triple {38813#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 20: Hoare triple {38813#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 21: Hoare triple {38813#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 22: Hoare triple {38813#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 23: Hoare triple {38813#true} assume 8464 == #t~mem32;havoc #t~mem32; {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 24: Hoare triple {38813#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 25: Hoare triple {38813#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 26: Hoare triple {38813#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,248 INFO L273 TraceCheckUtils]: 27: Hoare triple {38813#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 28: Hoare triple {38813#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 29: Hoare triple {38813#true} ~skip~0 := 0; {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 30: Hoare triple {38813#true} assume !false; {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 31: Hoare triple {38813#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 32: Hoare triple {38813#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 33: Hoare triple {38813#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 34: Hoare triple {38813#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,249 INFO L273 TraceCheckUtils]: 35: Hoare triple {38813#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 36: Hoare triple {38813#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 37: Hoare triple {38813#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 38: Hoare triple {38813#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 39: Hoare triple {38813#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 40: Hoare triple {38813#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 41: Hoare triple {38813#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 42: Hoare triple {38813#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 43: Hoare triple {38813#true} assume 8496 == #t~mem35;havoc #t~mem35; {38813#true} is VALID [2018-11-23 12:48:43,250 INFO L273 TraceCheckUtils]: 44: Hoare triple {38813#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {38813#true} is VALID [2018-11-23 12:48:43,251 INFO L273 TraceCheckUtils]: 45: Hoare triple {38813#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {38813#true} is VALID [2018-11-23 12:48:43,251 INFO L273 TraceCheckUtils]: 46: Hoare triple {38813#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {38813#true} is VALID [2018-11-23 12:48:43,252 INFO L273 TraceCheckUtils]: 47: Hoare triple {38813#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,252 INFO L273 TraceCheckUtils]: 48: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,253 INFO L273 TraceCheckUtils]: 49: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,253 INFO L273 TraceCheckUtils]: 50: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,253 INFO L273 TraceCheckUtils]: 51: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,254 INFO L273 TraceCheckUtils]: 52: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,254 INFO L273 TraceCheckUtils]: 53: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,254 INFO L273 TraceCheckUtils]: 54: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:43,255 INFO L273 TraceCheckUtils]: 55: Hoare triple {38815#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38816#(= 8512 |ssl3_accept_#t~mem26|)} is VALID [2018-11-23 12:48:43,256 INFO L273 TraceCheckUtils]: 56: Hoare triple {38816#(= 8512 |ssl3_accept_#t~mem26|)} assume 8192 == #t~mem26;havoc #t~mem26; {38814#false} is VALID [2018-11-23 12:48:43,256 INFO L273 TraceCheckUtils]: 57: Hoare triple {38814#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,256 INFO L273 TraceCheckUtils]: 58: Hoare triple {38814#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {38814#false} is VALID [2018-11-23 12:48:43,256 INFO L273 TraceCheckUtils]: 59: Hoare triple {38814#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,256 INFO L273 TraceCheckUtils]: 60: Hoare triple {38814#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,257 INFO L273 TraceCheckUtils]: 61: Hoare triple {38814#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {38814#false} is VALID [2018-11-23 12:48:43,257 INFO L273 TraceCheckUtils]: 62: Hoare triple {38814#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,257 INFO L273 TraceCheckUtils]: 63: Hoare triple {38814#false} assume 12292 != #t~mem62;havoc #t~mem62; {38814#false} is VALID [2018-11-23 12:48:43,257 INFO L273 TraceCheckUtils]: 64: Hoare triple {38814#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {38814#false} is VALID [2018-11-23 12:48:43,257 INFO L273 TraceCheckUtils]: 65: Hoare triple {38814#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,258 INFO L273 TraceCheckUtils]: 66: Hoare triple {38814#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {38814#false} is VALID [2018-11-23 12:48:43,258 INFO L273 TraceCheckUtils]: 67: Hoare triple {38814#false} ~skip~0 := 0; {38814#false} is VALID [2018-11-23 12:48:43,258 INFO L273 TraceCheckUtils]: 68: Hoare triple {38814#false} assume !false; {38814#false} is VALID [2018-11-23 12:48:43,258 INFO L273 TraceCheckUtils]: 69: Hoare triple {38814#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,258 INFO L273 TraceCheckUtils]: 70: Hoare triple {38814#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 71: Hoare triple {38814#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 72: Hoare triple {38814#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 73: Hoare triple {38814#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 74: Hoare triple {38814#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 75: Hoare triple {38814#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 76: Hoare triple {38814#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,259 INFO L273 TraceCheckUtils]: 77: Hoare triple {38814#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 78: Hoare triple {38814#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 79: Hoare triple {38814#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 80: Hoare triple {38814#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 81: Hoare triple {38814#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 82: Hoare triple {38814#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 83: Hoare triple {38814#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 84: Hoare triple {38814#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 85: Hoare triple {38814#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,260 INFO L273 TraceCheckUtils]: 86: Hoare triple {38814#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 87: Hoare triple {38814#false} assume 8544 == #t~mem41;havoc #t~mem41; {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 88: Hoare triple {38814#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 89: Hoare triple {38814#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 90: Hoare triple {38814#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 91: Hoare triple {38814#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 92: Hoare triple {38814#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 93: Hoare triple {38814#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 94: Hoare triple {38814#false} assume 7 == ~blastFlag~0; {38814#false} is VALID [2018-11-23 12:48:43,261 INFO L273 TraceCheckUtils]: 95: Hoare triple {38814#false} assume !false; {38814#false} is VALID [2018-11-23 12:48:43,266 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:43,267 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:43,267 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:43,267 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:43,267 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:43,267 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:43,350 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 86 edges. 86 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:43,351 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:43,351 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:43,351 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:43,352 INFO L87 Difference]: Start difference. First operand 260 states and 385 transitions. Second operand 4 states. [2018-11-23 12:48:44,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:44,625 INFO L93 Difference]: Finished difference Result 517 states and 771 transitions. [2018-11-23 12:48:44,625 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:44,625 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 12:48:44,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:44,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:44,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 12:48:44,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:44,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 476 transitions. [2018-11-23 12:48:44,630 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 476 transitions. [2018-11-23 12:48:45,102 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 476 edges. 476 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:45,107 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:45,108 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:45,108 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:45,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:45,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:45,261 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:45,261 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:45,262 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:45,262 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:45,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:45,268 INFO L93 Difference]: Finished difference Result 282 states and 413 transitions. [2018-11-23 12:48:45,268 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 413 transitions. [2018-11-23 12:48:45,268 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:45,268 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:45,269 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:45,269 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:45,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:45,274 INFO L93 Difference]: Finished difference Result 282 states and 413 transitions. [2018-11-23 12:48:45,274 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 413 transitions. [2018-11-23 12:48:45,274 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:45,274 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:45,274 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:45,274 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:45,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:45,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 384 transitions. [2018-11-23 12:48:45,279 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 384 transitions. Word has length 96 [2018-11-23 12:48:45,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:45,279 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 384 transitions. [2018-11-23 12:48:45,279 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:45,279 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 384 transitions. [2018-11-23 12:48:45,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2018-11-23 12:48:45,280 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:45,280 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:45,280 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:45,280 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:45,280 INFO L82 PathProgramCache]: Analyzing trace with hash 1167346926, now seen corresponding path program 1 times [2018-11-23 12:48:45,280 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:45,280 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:45,281 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:45,281 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:45,281 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:45,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:45,407 INFO L256 TraceCheckUtils]: 0: Hoare triple {40276#true} call ULTIMATE.init(); {40276#true} is VALID [2018-11-23 12:48:45,408 INFO L273 TraceCheckUtils]: 1: Hoare triple {40276#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,408 INFO L273 TraceCheckUtils]: 2: Hoare triple {40276#true} assume true; {40276#true} is VALID [2018-11-23 12:48:45,408 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {40276#true} {40276#true} #633#return; {40276#true} is VALID [2018-11-23 12:48:45,408 INFO L256 TraceCheckUtils]: 4: Hoare triple {40276#true} call #t~ret138 := main(); {40276#true} is VALID [2018-11-23 12:48:45,409 INFO L273 TraceCheckUtils]: 5: Hoare triple {40276#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,409 INFO L256 TraceCheckUtils]: 6: Hoare triple {40276#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {40276#true} is VALID [2018-11-23 12:48:45,409 INFO L273 TraceCheckUtils]: 7: Hoare triple {40276#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,409 INFO L273 TraceCheckUtils]: 8: Hoare triple {40276#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {40276#true} is VALID [2018-11-23 12:48:45,409 INFO L273 TraceCheckUtils]: 9: Hoare triple {40276#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 10: Hoare triple {40276#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 11: Hoare triple {40276#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 12: Hoare triple {40276#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 13: Hoare triple {40276#true} assume !false; {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 14: Hoare triple {40276#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 15: Hoare triple {40276#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,410 INFO L273 TraceCheckUtils]: 16: Hoare triple {40276#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 17: Hoare triple {40276#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 18: Hoare triple {40276#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 19: Hoare triple {40276#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 20: Hoare triple {40276#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 21: Hoare triple {40276#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 22: Hoare triple {40276#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 23: Hoare triple {40276#true} assume 8464 == #t~mem32;havoc #t~mem32; {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 24: Hoare triple {40276#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {40276#true} is VALID [2018-11-23 12:48:45,411 INFO L273 TraceCheckUtils]: 25: Hoare triple {40276#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 26: Hoare triple {40276#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 27: Hoare triple {40276#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 28: Hoare triple {40276#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 29: Hoare triple {40276#true} ~skip~0 := 0; {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 30: Hoare triple {40276#true} assume !false; {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 31: Hoare triple {40276#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 32: Hoare triple {40276#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,412 INFO L273 TraceCheckUtils]: 33: Hoare triple {40276#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 34: Hoare triple {40276#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 35: Hoare triple {40276#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 36: Hoare triple {40276#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 37: Hoare triple {40276#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 38: Hoare triple {40276#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 39: Hoare triple {40276#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 40: Hoare triple {40276#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 41: Hoare triple {40276#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,413 INFO L273 TraceCheckUtils]: 42: Hoare triple {40276#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,414 INFO L273 TraceCheckUtils]: 43: Hoare triple {40276#true} assume 8496 == #t~mem35;havoc #t~mem35; {40276#true} is VALID [2018-11-23 12:48:45,414 INFO L273 TraceCheckUtils]: 44: Hoare triple {40276#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {40276#true} is VALID [2018-11-23 12:48:45,414 INFO L273 TraceCheckUtils]: 45: Hoare triple {40276#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {40276#true} is VALID [2018-11-23 12:48:45,414 INFO L273 TraceCheckUtils]: 46: Hoare triple {40276#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {40276#true} is VALID [2018-11-23 12:48:45,415 INFO L273 TraceCheckUtils]: 47: Hoare triple {40276#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,416 INFO L273 TraceCheckUtils]: 48: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,416 INFO L273 TraceCheckUtils]: 49: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,417 INFO L273 TraceCheckUtils]: 50: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,417 INFO L273 TraceCheckUtils]: 51: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,417 INFO L273 TraceCheckUtils]: 52: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,418 INFO L273 TraceCheckUtils]: 53: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,418 INFO L273 TraceCheckUtils]: 54: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,419 INFO L273 TraceCheckUtils]: 55: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:45,420 INFO L273 TraceCheckUtils]: 56: Hoare triple {40278#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40279#(= 8656 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:48:45,420 INFO L273 TraceCheckUtils]: 57: Hoare triple {40279#(= 8656 |ssl3_accept_#t~mem27|)} assume 24576 == #t~mem27;havoc #t~mem27; {40277#false} is VALID [2018-11-23 12:48:45,421 INFO L273 TraceCheckUtils]: 58: Hoare triple {40277#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,421 INFO L273 TraceCheckUtils]: 59: Hoare triple {40277#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {40277#false} is VALID [2018-11-23 12:48:45,421 INFO L273 TraceCheckUtils]: 60: Hoare triple {40277#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,421 INFO L273 TraceCheckUtils]: 61: Hoare triple {40277#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,421 INFO L273 TraceCheckUtils]: 62: Hoare triple {40277#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {40277#false} is VALID [2018-11-23 12:48:45,422 INFO L273 TraceCheckUtils]: 63: Hoare triple {40277#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,422 INFO L273 TraceCheckUtils]: 64: Hoare triple {40277#false} assume 12292 != #t~mem62;havoc #t~mem62; {40277#false} is VALID [2018-11-23 12:48:45,422 INFO L273 TraceCheckUtils]: 65: Hoare triple {40277#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {40277#false} is VALID [2018-11-23 12:48:45,422 INFO L273 TraceCheckUtils]: 66: Hoare triple {40277#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,422 INFO L273 TraceCheckUtils]: 67: Hoare triple {40277#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {40277#false} is VALID [2018-11-23 12:48:45,423 INFO L273 TraceCheckUtils]: 68: Hoare triple {40277#false} ~skip~0 := 0; {40277#false} is VALID [2018-11-23 12:48:45,423 INFO L273 TraceCheckUtils]: 69: Hoare triple {40277#false} assume !false; {40277#false} is VALID [2018-11-23 12:48:45,423 INFO L273 TraceCheckUtils]: 70: Hoare triple {40277#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,423 INFO L273 TraceCheckUtils]: 71: Hoare triple {40277#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,423 INFO L273 TraceCheckUtils]: 72: Hoare triple {40277#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,424 INFO L273 TraceCheckUtils]: 73: Hoare triple {40277#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,424 INFO L273 TraceCheckUtils]: 74: Hoare triple {40277#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,424 INFO L273 TraceCheckUtils]: 75: Hoare triple {40277#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,424 INFO L273 TraceCheckUtils]: 76: Hoare triple {40277#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,424 INFO L273 TraceCheckUtils]: 77: Hoare triple {40277#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,425 INFO L273 TraceCheckUtils]: 78: Hoare triple {40277#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,425 INFO L273 TraceCheckUtils]: 79: Hoare triple {40277#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,425 INFO L273 TraceCheckUtils]: 80: Hoare triple {40277#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,425 INFO L273 TraceCheckUtils]: 81: Hoare triple {40277#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,425 INFO L273 TraceCheckUtils]: 82: Hoare triple {40277#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,425 INFO L273 TraceCheckUtils]: 83: Hoare triple {40277#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,426 INFO L273 TraceCheckUtils]: 84: Hoare triple {40277#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,426 INFO L273 TraceCheckUtils]: 85: Hoare triple {40277#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,426 INFO L273 TraceCheckUtils]: 86: Hoare triple {40277#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,426 INFO L273 TraceCheckUtils]: 87: Hoare triple {40277#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,426 INFO L273 TraceCheckUtils]: 88: Hoare triple {40277#false} assume 8544 == #t~mem41;havoc #t~mem41; {40277#false} is VALID [2018-11-23 12:48:45,426 INFO L273 TraceCheckUtils]: 89: Hoare triple {40277#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,427 INFO L273 TraceCheckUtils]: 90: Hoare triple {40277#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,427 INFO L273 TraceCheckUtils]: 91: Hoare triple {40277#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {40277#false} is VALID [2018-11-23 12:48:45,427 INFO L273 TraceCheckUtils]: 92: Hoare triple {40277#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {40277#false} is VALID [2018-11-23 12:48:45,427 INFO L273 TraceCheckUtils]: 93: Hoare triple {40277#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {40277#false} is VALID [2018-11-23 12:48:45,427 INFO L273 TraceCheckUtils]: 94: Hoare triple {40277#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {40277#false} is VALID [2018-11-23 12:48:45,427 INFO L273 TraceCheckUtils]: 95: Hoare triple {40277#false} assume 7 == ~blastFlag~0; {40277#false} is VALID [2018-11-23 12:48:45,428 INFO L273 TraceCheckUtils]: 96: Hoare triple {40277#false} assume !false; {40277#false} is VALID [2018-11-23 12:48:45,435 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:45,435 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:45,435 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:45,435 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:45,436 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:45,436 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:45,536 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:45,536 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:45,537 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:45,537 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:45,537 INFO L87 Difference]: Start difference. First operand 260 states and 384 transitions. Second operand 4 states. [2018-11-23 12:48:46,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:46,877 INFO L93 Difference]: Finished difference Result 540 states and 799 transitions. [2018-11-23 12:48:46,877 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:46,877 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:46,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:46,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:46,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 535 transitions. [2018-11-23 12:48:46,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:46,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 535 transitions. [2018-11-23 12:48:46,882 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 535 transitions. [2018-11-23 12:48:47,406 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 535 edges. 535 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:47,413 INFO L225 Difference]: With dead ends: 540 [2018-11-23 12:48:47,413 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 12:48:47,413 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:47,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 12:48:47,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 260. [2018-11-23 12:48:47,521 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:47,521 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:47,522 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:47,522 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 260 states. [2018-11-23 12:48:47,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:47,527 INFO L93 Difference]: Finished difference Result 305 states and 442 transitions. [2018-11-23 12:48:47,528 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 442 transitions. [2018-11-23 12:48:47,528 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:47,528 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:47,528 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:47,528 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 305 states. [2018-11-23 12:48:47,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:47,533 INFO L93 Difference]: Finished difference Result 305 states and 442 transitions. [2018-11-23 12:48:47,534 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 442 transitions. [2018-11-23 12:48:47,534 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:47,534 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:47,534 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:47,534 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:47,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:47,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 383 transitions. [2018-11-23 12:48:47,539 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 383 transitions. Word has length 97 [2018-11-23 12:48:47,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:47,539 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 383 transitions. [2018-11-23 12:48:47,539 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:47,539 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 383 transitions. [2018-11-23 12:48:47,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2018-11-23 12:48:47,540 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:47,540 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:47,540 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:47,541 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:47,541 INFO L82 PathProgramCache]: Analyzing trace with hash 686266668, now seen corresponding path program 1 times [2018-11-23 12:48:47,541 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:47,541 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:47,542 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:47,542 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:47,542 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:47,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:47,801 INFO L256 TraceCheckUtils]: 0: Hoare triple {41816#true} call ULTIMATE.init(); {41816#true} is VALID [2018-11-23 12:48:47,801 INFO L273 TraceCheckUtils]: 1: Hoare triple {41816#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,801 INFO L273 TraceCheckUtils]: 2: Hoare triple {41816#true} assume true; {41816#true} is VALID [2018-11-23 12:48:47,801 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {41816#true} {41816#true} #633#return; {41816#true} is VALID [2018-11-23 12:48:47,802 INFO L256 TraceCheckUtils]: 4: Hoare triple {41816#true} call #t~ret138 := main(); {41816#true} is VALID [2018-11-23 12:48:47,802 INFO L273 TraceCheckUtils]: 5: Hoare triple {41816#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,802 INFO L256 TraceCheckUtils]: 6: Hoare triple {41816#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {41816#true} is VALID [2018-11-23 12:48:47,802 INFO L273 TraceCheckUtils]: 7: Hoare triple {41816#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,802 INFO L273 TraceCheckUtils]: 8: Hoare triple {41816#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {41816#true} is VALID [2018-11-23 12:48:47,802 INFO L273 TraceCheckUtils]: 9: Hoare triple {41816#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {41816#true} is VALID [2018-11-23 12:48:47,803 INFO L273 TraceCheckUtils]: 10: Hoare triple {41816#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {41816#true} is VALID [2018-11-23 12:48:47,803 INFO L273 TraceCheckUtils]: 11: Hoare triple {41816#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,803 INFO L273 TraceCheckUtils]: 12: Hoare triple {41816#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {41816#true} is VALID [2018-11-23 12:48:47,803 INFO L273 TraceCheckUtils]: 13: Hoare triple {41816#true} assume !false; {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 14: Hoare triple {41816#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 15: Hoare triple {41816#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 16: Hoare triple {41816#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 17: Hoare triple {41816#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 18: Hoare triple {41816#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 19: Hoare triple {41816#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 20: Hoare triple {41816#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 21: Hoare triple {41816#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,804 INFO L273 TraceCheckUtils]: 22: Hoare triple {41816#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 23: Hoare triple {41816#true} assume 8464 == #t~mem32;havoc #t~mem32; {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 24: Hoare triple {41816#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 25: Hoare triple {41816#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 26: Hoare triple {41816#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 27: Hoare triple {41816#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 28: Hoare triple {41816#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 29: Hoare triple {41816#true} ~skip~0 := 0; {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 30: Hoare triple {41816#true} assume !false; {41816#true} is VALID [2018-11-23 12:48:47,805 INFO L273 TraceCheckUtils]: 31: Hoare triple {41816#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 32: Hoare triple {41816#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 33: Hoare triple {41816#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 34: Hoare triple {41816#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 35: Hoare triple {41816#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 36: Hoare triple {41816#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 37: Hoare triple {41816#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 38: Hoare triple {41816#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 39: Hoare triple {41816#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,806 INFO L273 TraceCheckUtils]: 40: Hoare triple {41816#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,807 INFO L273 TraceCheckUtils]: 41: Hoare triple {41816#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,807 INFO L273 TraceCheckUtils]: 42: Hoare triple {41816#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,807 INFO L273 TraceCheckUtils]: 43: Hoare triple {41816#true} assume 8496 == #t~mem35;havoc #t~mem35; {41816#true} is VALID [2018-11-23 12:48:47,807 INFO L273 TraceCheckUtils]: 44: Hoare triple {41816#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {41816#true} is VALID [2018-11-23 12:48:47,807 INFO L273 TraceCheckUtils]: 45: Hoare triple {41816#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {41816#true} is VALID [2018-11-23 12:48:47,807 INFO L273 TraceCheckUtils]: 46: Hoare triple {41816#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {41816#true} is VALID [2018-11-23 12:48:47,810 INFO L273 TraceCheckUtils]: 47: Hoare triple {41816#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,812 INFO L273 TraceCheckUtils]: 48: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,813 INFO L273 TraceCheckUtils]: 49: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,814 INFO L273 TraceCheckUtils]: 50: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,814 INFO L273 TraceCheckUtils]: 51: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,816 INFO L273 TraceCheckUtils]: 52: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,816 INFO L273 TraceCheckUtils]: 53: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,818 INFO L273 TraceCheckUtils]: 54: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,818 INFO L273 TraceCheckUtils]: 55: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:47,821 INFO L273 TraceCheckUtils]: 56: Hoare triple {41818#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41819#(= 8512 |ssl3_accept_#t~mem27|)} is VALID [2018-11-23 12:48:47,821 INFO L273 TraceCheckUtils]: 57: Hoare triple {41819#(= 8512 |ssl3_accept_#t~mem27|)} assume 24576 == #t~mem27;havoc #t~mem27; {41817#false} is VALID [2018-11-23 12:48:47,821 INFO L273 TraceCheckUtils]: 58: Hoare triple {41817#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,821 INFO L273 TraceCheckUtils]: 59: Hoare triple {41817#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {41817#false} is VALID [2018-11-23 12:48:47,821 INFO L273 TraceCheckUtils]: 60: Hoare triple {41817#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,821 INFO L273 TraceCheckUtils]: 61: Hoare triple {41817#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 62: Hoare triple {41817#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 63: Hoare triple {41817#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 64: Hoare triple {41817#false} assume 12292 != #t~mem62;havoc #t~mem62; {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 65: Hoare triple {41817#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 66: Hoare triple {41817#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 67: Hoare triple {41817#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 68: Hoare triple {41817#false} ~skip~0 := 0; {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 69: Hoare triple {41817#false} assume !false; {41817#false} is VALID [2018-11-23 12:48:47,822 INFO L273 TraceCheckUtils]: 70: Hoare triple {41817#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 71: Hoare triple {41817#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 72: Hoare triple {41817#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 73: Hoare triple {41817#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 74: Hoare triple {41817#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 75: Hoare triple {41817#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 76: Hoare triple {41817#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 77: Hoare triple {41817#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,823 INFO L273 TraceCheckUtils]: 78: Hoare triple {41817#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 79: Hoare triple {41817#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 80: Hoare triple {41817#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 81: Hoare triple {41817#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 82: Hoare triple {41817#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 83: Hoare triple {41817#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 84: Hoare triple {41817#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 85: Hoare triple {41817#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 86: Hoare triple {41817#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,824 INFO L273 TraceCheckUtils]: 87: Hoare triple {41817#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 88: Hoare triple {41817#false} assume 8544 == #t~mem41;havoc #t~mem41; {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 89: Hoare triple {41817#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 90: Hoare triple {41817#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 91: Hoare triple {41817#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 92: Hoare triple {41817#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 93: Hoare triple {41817#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 94: Hoare triple {41817#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 95: Hoare triple {41817#false} assume 7 == ~blastFlag~0; {41817#false} is VALID [2018-11-23 12:48:47,825 INFO L273 TraceCheckUtils]: 96: Hoare triple {41817#false} assume !false; {41817#false} is VALID [2018-11-23 12:48:47,831 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:47,831 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:47,831 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:47,831 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:47,831 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:47,832 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:47,949 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:47,949 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:47,949 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:47,949 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:47,950 INFO L87 Difference]: Start difference. First operand 260 states and 383 transitions. Second operand 4 states. [2018-11-23 12:48:49,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:49,361 INFO L93 Difference]: Finished difference Result 517 states and 767 transitions. [2018-11-23 12:48:49,361 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:49,362 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 97 [2018-11-23 12:48:49,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:49,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:49,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 12:48:49,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:49,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 475 transitions. [2018-11-23 12:48:49,365 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 475 transitions. [2018-11-23 12:48:49,819 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 475 edges. 475 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:49,825 INFO L225 Difference]: With dead ends: 517 [2018-11-23 12:48:49,825 INFO L226 Difference]: Without dead ends: 282 [2018-11-23 12:48:49,826 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:49,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2018-11-23 12:48:50,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 260. [2018-11-23 12:48:50,040 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:50,040 INFO L82 GeneralOperation]: Start isEquivalent. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:50,040 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:50,040 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 260 states. [2018-11-23 12:48:50,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:50,046 INFO L93 Difference]: Finished difference Result 282 states and 411 transitions. [2018-11-23 12:48:50,046 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 411 transitions. [2018-11-23 12:48:50,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:50,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:50,046 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:50,047 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 282 states. [2018-11-23 12:48:50,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:50,051 INFO L93 Difference]: Finished difference Result 282 states and 411 transitions. [2018-11-23 12:48:50,051 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 411 transitions. [2018-11-23 12:48:50,052 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:50,052 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:50,052 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:50,052 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:50,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:50,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 382 transitions. [2018-11-23 12:48:50,056 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 382 transitions. Word has length 97 [2018-11-23 12:48:50,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:50,056 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 382 transitions. [2018-11-23 12:48:50,056 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:50,057 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 382 transitions. [2018-11-23 12:48:50,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2018-11-23 12:48:50,057 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:50,057 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:50,057 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:50,058 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:50,058 INFO L82 PathProgramCache]: Analyzing trace with hash 1060944413, now seen corresponding path program 1 times [2018-11-23 12:48:50,058 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:50,058 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:50,059 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:50,059 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:50,059 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:50,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:50,455 INFO L256 TraceCheckUtils]: 0: Hoare triple {43279#true} call ULTIMATE.init(); {43279#true} is VALID [2018-11-23 12:48:50,456 INFO L273 TraceCheckUtils]: 1: Hoare triple {43279#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,456 INFO L273 TraceCheckUtils]: 2: Hoare triple {43279#true} assume true; {43279#true} is VALID [2018-11-23 12:48:50,456 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {43279#true} {43279#true} #633#return; {43279#true} is VALID [2018-11-23 12:48:50,456 INFO L256 TraceCheckUtils]: 4: Hoare triple {43279#true} call #t~ret138 := main(); {43279#true} is VALID [2018-11-23 12:48:50,456 INFO L273 TraceCheckUtils]: 5: Hoare triple {43279#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,457 INFO L256 TraceCheckUtils]: 6: Hoare triple {43279#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {43279#true} is VALID [2018-11-23 12:48:50,457 INFO L273 TraceCheckUtils]: 7: Hoare triple {43279#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,457 INFO L273 TraceCheckUtils]: 8: Hoare triple {43279#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {43279#true} is VALID [2018-11-23 12:48:50,457 INFO L273 TraceCheckUtils]: 9: Hoare triple {43279#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {43279#true} is VALID [2018-11-23 12:48:50,457 INFO L273 TraceCheckUtils]: 10: Hoare triple {43279#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 11: Hoare triple {43279#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 12: Hoare triple {43279#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 13: Hoare triple {43279#true} assume !false; {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 14: Hoare triple {43279#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 15: Hoare triple {43279#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 16: Hoare triple {43279#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 17: Hoare triple {43279#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 18: Hoare triple {43279#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,458 INFO L273 TraceCheckUtils]: 19: Hoare triple {43279#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 20: Hoare triple {43279#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 21: Hoare triple {43279#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 22: Hoare triple {43279#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 23: Hoare triple {43279#true} assume 8464 == #t~mem32;havoc #t~mem32; {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 24: Hoare triple {43279#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 25: Hoare triple {43279#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 26: Hoare triple {43279#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,459 INFO L273 TraceCheckUtils]: 27: Hoare triple {43279#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 28: Hoare triple {43279#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 29: Hoare triple {43279#true} ~skip~0 := 0; {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 30: Hoare triple {43279#true} assume !false; {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 31: Hoare triple {43279#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 32: Hoare triple {43279#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 33: Hoare triple {43279#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 34: Hoare triple {43279#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 35: Hoare triple {43279#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,460 INFO L273 TraceCheckUtils]: 36: Hoare triple {43279#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,462 INFO L273 TraceCheckUtils]: 37: Hoare triple {43279#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,462 INFO L273 TraceCheckUtils]: 38: Hoare triple {43279#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,462 INFO L273 TraceCheckUtils]: 39: Hoare triple {43279#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,462 INFO L273 TraceCheckUtils]: 40: Hoare triple {43279#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,462 INFO L273 TraceCheckUtils]: 41: Hoare triple {43279#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,462 INFO L273 TraceCheckUtils]: 42: Hoare triple {43279#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,463 INFO L273 TraceCheckUtils]: 43: Hoare triple {43279#true} assume 8496 == #t~mem35;havoc #t~mem35; {43279#true} is VALID [2018-11-23 12:48:50,463 INFO L273 TraceCheckUtils]: 44: Hoare triple {43279#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {43279#true} is VALID [2018-11-23 12:48:50,463 INFO L273 TraceCheckUtils]: 45: Hoare triple {43279#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {43279#true} is VALID [2018-11-23 12:48:50,463 INFO L273 TraceCheckUtils]: 46: Hoare triple {43279#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {43279#true} is VALID [2018-11-23 12:48:50,465 INFO L273 TraceCheckUtils]: 47: Hoare triple {43279#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,466 INFO L273 TraceCheckUtils]: 48: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,467 INFO L273 TraceCheckUtils]: 49: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,467 INFO L273 TraceCheckUtils]: 50: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,470 INFO L273 TraceCheckUtils]: 51: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,470 INFO L273 TraceCheckUtils]: 52: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,470 INFO L273 TraceCheckUtils]: 53: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,471 INFO L273 TraceCheckUtils]: 54: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,471 INFO L273 TraceCheckUtils]: 55: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,471 INFO L273 TraceCheckUtils]: 56: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:50,472 INFO L273 TraceCheckUtils]: 57: Hoare triple {43281#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43282#(= 8656 |ssl3_accept_#t~mem28|)} is VALID [2018-11-23 12:48:50,472 INFO L273 TraceCheckUtils]: 58: Hoare triple {43282#(= 8656 |ssl3_accept_#t~mem28|)} assume 8195 == #t~mem28;havoc #t~mem28; {43280#false} is VALID [2018-11-23 12:48:50,472 INFO L273 TraceCheckUtils]: 59: Hoare triple {43280#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,472 INFO L273 TraceCheckUtils]: 60: Hoare triple {43280#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {43280#false} is VALID [2018-11-23 12:48:50,472 INFO L273 TraceCheckUtils]: 61: Hoare triple {43280#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,472 INFO L273 TraceCheckUtils]: 62: Hoare triple {43280#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 63: Hoare triple {43280#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 64: Hoare triple {43280#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 65: Hoare triple {43280#false} assume 12292 != #t~mem62;havoc #t~mem62; {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 66: Hoare triple {43280#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 67: Hoare triple {43280#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 68: Hoare triple {43280#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 69: Hoare triple {43280#false} ~skip~0 := 0; {43280#false} is VALID [2018-11-23 12:48:50,473 INFO L273 TraceCheckUtils]: 70: Hoare triple {43280#false} assume !false; {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 71: Hoare triple {43280#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 72: Hoare triple {43280#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 73: Hoare triple {43280#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 74: Hoare triple {43280#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 75: Hoare triple {43280#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 76: Hoare triple {43280#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 77: Hoare triple {43280#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 78: Hoare triple {43280#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,474 INFO L273 TraceCheckUtils]: 79: Hoare triple {43280#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,475 INFO L273 TraceCheckUtils]: 80: Hoare triple {43280#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,475 INFO L273 TraceCheckUtils]: 81: Hoare triple {43280#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,475 INFO L273 TraceCheckUtils]: 82: Hoare triple {43280#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,475 INFO L273 TraceCheckUtils]: 83: Hoare triple {43280#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,475 INFO L273 TraceCheckUtils]: 84: Hoare triple {43280#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,475 INFO L273 TraceCheckUtils]: 85: Hoare triple {43280#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 86: Hoare triple {43280#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 87: Hoare triple {43280#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 88: Hoare triple {43280#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 89: Hoare triple {43280#false} assume 8544 == #t~mem41;havoc #t~mem41; {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 90: Hoare triple {43280#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 91: Hoare triple {43280#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 92: Hoare triple {43280#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {43280#false} is VALID [2018-11-23 12:48:50,476 INFO L273 TraceCheckUtils]: 93: Hoare triple {43280#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {43280#false} is VALID [2018-11-23 12:48:50,477 INFO L273 TraceCheckUtils]: 94: Hoare triple {43280#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {43280#false} is VALID [2018-11-23 12:48:50,477 INFO L273 TraceCheckUtils]: 95: Hoare triple {43280#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {43280#false} is VALID [2018-11-23 12:48:50,477 INFO L273 TraceCheckUtils]: 96: Hoare triple {43280#false} assume 7 == ~blastFlag~0; {43280#false} is VALID [2018-11-23 12:48:50,477 INFO L273 TraceCheckUtils]: 97: Hoare triple {43280#false} assume !false; {43280#false} is VALID [2018-11-23 12:48:50,482 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:50,483 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:50,483 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:50,483 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:50,483 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:50,483 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:50,571 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:50,571 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:50,572 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:50,572 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:50,572 INFO L87 Difference]: Start difference. First operand 260 states and 382 transitions. Second operand 4 states. [2018-11-23 12:48:51,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:51,898 INFO L93 Difference]: Finished difference Result 530 states and 783 transitions. [2018-11-23 12:48:51,898 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:51,898 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:51,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:51,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:51,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 522 transitions. [2018-11-23 12:48:51,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:51,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 522 transitions. [2018-11-23 12:48:51,903 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 522 transitions. [2018-11-23 12:48:52,409 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 522 edges. 522 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:52,415 INFO L225 Difference]: With dead ends: 530 [2018-11-23 12:48:52,415 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 12:48:52,416 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:52,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 12:48:52,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 260. [2018-11-23 12:48:52,613 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:52,613 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:52,613 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:52,613 INFO L87 Difference]: Start difference. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:52,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:52,618 INFO L93 Difference]: Finished difference Result 295 states and 428 transitions. [2018-11-23 12:48:52,618 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 428 transitions. [2018-11-23 12:48:52,619 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:52,619 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:52,619 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:52,619 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:52,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:52,624 INFO L93 Difference]: Finished difference Result 295 states and 428 transitions. [2018-11-23 12:48:52,624 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 428 transitions. [2018-11-23 12:48:52,625 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:52,625 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:52,625 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:52,625 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:52,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:52,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 381 transitions. [2018-11-23 12:48:52,629 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 381 transitions. Word has length 98 [2018-11-23 12:48:52,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:52,629 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 381 transitions. [2018-11-23 12:48:52,629 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:52,630 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 381 transitions. [2018-11-23 12:48:52,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2018-11-23 12:48:52,630 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:52,630 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:52,630 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:52,630 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:52,631 INFO L82 PathProgramCache]: Analyzing trace with hash -967641697, now seen corresponding path program 1 times [2018-11-23 12:48:52,631 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:52,631 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:52,632 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:52,632 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:52,632 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:52,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:52,776 INFO L256 TraceCheckUtils]: 0: Hoare triple {44788#true} call ULTIMATE.init(); {44788#true} is VALID [2018-11-23 12:48:52,776 INFO L273 TraceCheckUtils]: 1: Hoare triple {44788#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,776 INFO L273 TraceCheckUtils]: 2: Hoare triple {44788#true} assume true; {44788#true} is VALID [2018-11-23 12:48:52,776 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {44788#true} {44788#true} #633#return; {44788#true} is VALID [2018-11-23 12:48:52,777 INFO L256 TraceCheckUtils]: 4: Hoare triple {44788#true} call #t~ret138 := main(); {44788#true} is VALID [2018-11-23 12:48:52,777 INFO L273 TraceCheckUtils]: 5: Hoare triple {44788#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,777 INFO L256 TraceCheckUtils]: 6: Hoare triple {44788#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {44788#true} is VALID [2018-11-23 12:48:52,777 INFO L273 TraceCheckUtils]: 7: Hoare triple {44788#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,777 INFO L273 TraceCheckUtils]: 8: Hoare triple {44788#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {44788#true} is VALID [2018-11-23 12:48:52,778 INFO L273 TraceCheckUtils]: 9: Hoare triple {44788#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {44788#true} is VALID [2018-11-23 12:48:52,778 INFO L273 TraceCheckUtils]: 10: Hoare triple {44788#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {44788#true} is VALID [2018-11-23 12:48:52,778 INFO L273 TraceCheckUtils]: 11: Hoare triple {44788#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,778 INFO L273 TraceCheckUtils]: 12: Hoare triple {44788#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {44788#true} is VALID [2018-11-23 12:48:52,778 INFO L273 TraceCheckUtils]: 13: Hoare triple {44788#true} assume !false; {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 14: Hoare triple {44788#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 15: Hoare triple {44788#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 16: Hoare triple {44788#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 17: Hoare triple {44788#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 18: Hoare triple {44788#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 19: Hoare triple {44788#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,779 INFO L273 TraceCheckUtils]: 20: Hoare triple {44788#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,780 INFO L273 TraceCheckUtils]: 21: Hoare triple {44788#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,780 INFO L273 TraceCheckUtils]: 22: Hoare triple {44788#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,780 INFO L273 TraceCheckUtils]: 23: Hoare triple {44788#true} assume 8464 == #t~mem32;havoc #t~mem32; {44788#true} is VALID [2018-11-23 12:48:52,780 INFO L273 TraceCheckUtils]: 24: Hoare triple {44788#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {44788#true} is VALID [2018-11-23 12:48:52,780 INFO L273 TraceCheckUtils]: 25: Hoare triple {44788#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {44788#true} is VALID [2018-11-23 12:48:52,780 INFO L273 TraceCheckUtils]: 26: Hoare triple {44788#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,781 INFO L273 TraceCheckUtils]: 27: Hoare triple {44788#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,781 INFO L273 TraceCheckUtils]: 28: Hoare triple {44788#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {44788#true} is VALID [2018-11-23 12:48:52,781 INFO L273 TraceCheckUtils]: 29: Hoare triple {44788#true} ~skip~0 := 0; {44788#true} is VALID [2018-11-23 12:48:52,781 INFO L273 TraceCheckUtils]: 30: Hoare triple {44788#true} assume !false; {44788#true} is VALID [2018-11-23 12:48:52,781 INFO L273 TraceCheckUtils]: 31: Hoare triple {44788#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,781 INFO L273 TraceCheckUtils]: 32: Hoare triple {44788#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,782 INFO L273 TraceCheckUtils]: 33: Hoare triple {44788#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,782 INFO L273 TraceCheckUtils]: 34: Hoare triple {44788#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,782 INFO L273 TraceCheckUtils]: 35: Hoare triple {44788#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,782 INFO L273 TraceCheckUtils]: 36: Hoare triple {44788#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,782 INFO L273 TraceCheckUtils]: 37: Hoare triple {44788#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,782 INFO L273 TraceCheckUtils]: 38: Hoare triple {44788#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,783 INFO L273 TraceCheckUtils]: 39: Hoare triple {44788#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,783 INFO L273 TraceCheckUtils]: 40: Hoare triple {44788#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,783 INFO L273 TraceCheckUtils]: 41: Hoare triple {44788#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,783 INFO L273 TraceCheckUtils]: 42: Hoare triple {44788#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,783 INFO L273 TraceCheckUtils]: 43: Hoare triple {44788#true} assume 8496 == #t~mem35;havoc #t~mem35; {44788#true} is VALID [2018-11-23 12:48:52,783 INFO L273 TraceCheckUtils]: 44: Hoare triple {44788#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {44788#true} is VALID [2018-11-23 12:48:52,784 INFO L273 TraceCheckUtils]: 45: Hoare triple {44788#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {44788#true} is VALID [2018-11-23 12:48:52,784 INFO L273 TraceCheckUtils]: 46: Hoare triple {44788#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {44788#true} is VALID [2018-11-23 12:48:52,802 INFO L273 TraceCheckUtils]: 47: Hoare triple {44788#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,816 INFO L273 TraceCheckUtils]: 48: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,818 INFO L273 TraceCheckUtils]: 49: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,818 INFO L273 TraceCheckUtils]: 50: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,820 INFO L273 TraceCheckUtils]: 51: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,822 INFO L273 TraceCheckUtils]: 52: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,823 INFO L273 TraceCheckUtils]: 53: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,823 INFO L273 TraceCheckUtils]: 54: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,825 INFO L273 TraceCheckUtils]: 55: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,825 INFO L273 TraceCheckUtils]: 56: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:52,829 INFO L273 TraceCheckUtils]: 57: Hoare triple {44790#(= 8512 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44791#(= 8512 |ssl3_accept_#t~mem28|)} is VALID [2018-11-23 12:48:52,829 INFO L273 TraceCheckUtils]: 58: Hoare triple {44791#(= 8512 |ssl3_accept_#t~mem28|)} assume 8195 == #t~mem28;havoc #t~mem28; {44789#false} is VALID [2018-11-23 12:48:52,829 INFO L273 TraceCheckUtils]: 59: Hoare triple {44789#false} call write~int(1, ~s.base, 36 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 60: Hoare triple {44789#false} assume 0 != (~cb~0.base + ~cb~0.offset) % 4294967296; {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 61: Hoare triple {44789#false} call #t~mem59 := read~int(~s.base, ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 62: Hoare triple {44789#false} assume !(3 != #t~mem59 / 256);havoc #t~mem59;call write~int(8192, ~s.base, 4 + ~s.offset, 4);call #t~mem60.base, #t~mem60.offset := read~$Pointer$(~s.base, 60 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 63: Hoare triple {44789#false} assume !(0 == (#t~mem60.base + #t~mem60.offset) % 4294967296);havoc #t~mem60.base, #t~mem60.offset; {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 64: Hoare triple {44789#false} assume !(0 == ~tmp___4~0);call write~int(0, ~s.base, 64 + ~s.offset, 4);call #t~mem62 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 65: Hoare triple {44789#false} assume 12292 != #t~mem62;havoc #t~mem62; {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 66: Hoare triple {44789#false} assume !(0 == ~tmp___5~0);call write~int(8464, ~s.base, 52 + ~s.offset, 4);call #t~mem63.base, #t~mem63.offset := read~$Pointer$(~s.base, 204 + ~s.offset, 4);call #t~mem64 := read~int(#t~mem63.base, 72 + #t~mem63.offset, 4);call write~int(1 + #t~mem64, #t~mem63.base, 72 + #t~mem63.offset, 4);havoc #t~mem64;havoc #t~mem63.base, #t~mem63.offset; {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 67: Hoare triple {44789#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,830 INFO L273 TraceCheckUtils]: 68: Hoare triple {44789#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 69: Hoare triple {44789#false} ~skip~0 := 0; {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 70: Hoare triple {44789#false} assume !false; {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 71: Hoare triple {44789#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 72: Hoare triple {44789#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 73: Hoare triple {44789#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 74: Hoare triple {44789#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 75: Hoare triple {44789#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 76: Hoare triple {44789#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,831 INFO L273 TraceCheckUtils]: 77: Hoare triple {44789#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 78: Hoare triple {44789#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 79: Hoare triple {44789#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 80: Hoare triple {44789#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 81: Hoare triple {44789#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 82: Hoare triple {44789#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 83: Hoare triple {44789#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 84: Hoare triple {44789#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 85: Hoare triple {44789#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,832 INFO L273 TraceCheckUtils]: 86: Hoare triple {44789#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 87: Hoare triple {44789#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 88: Hoare triple {44789#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 89: Hoare triple {44789#false} assume 8544 == #t~mem41;havoc #t~mem41; {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 90: Hoare triple {44789#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 91: Hoare triple {44789#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 92: Hoare triple {44789#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {44789#false} is VALID [2018-11-23 12:48:52,833 INFO L273 TraceCheckUtils]: 93: Hoare triple {44789#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {44789#false} is VALID [2018-11-23 12:48:52,834 INFO L273 TraceCheckUtils]: 94: Hoare triple {44789#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {44789#false} is VALID [2018-11-23 12:48:52,834 INFO L273 TraceCheckUtils]: 95: Hoare triple {44789#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {44789#false} is VALID [2018-11-23 12:48:52,834 INFO L273 TraceCheckUtils]: 96: Hoare triple {44789#false} assume 7 == ~blastFlag~0; {44789#false} is VALID [2018-11-23 12:48:52,834 INFO L273 TraceCheckUtils]: 97: Hoare triple {44789#false} assume !false; {44789#false} is VALID [2018-11-23 12:48:52,841 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:52,841 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:52,841 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:52,842 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:52,842 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:52,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:52,963 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:52,963 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:52,964 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:52,964 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:52,964 INFO L87 Difference]: Start difference. First operand 260 states and 381 transitions. Second operand 4 states. [2018-11-23 12:48:54,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:54,340 INFO L93 Difference]: Finished difference Result 507 states and 751 transitions. [2018-11-23 12:48:54,340 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:54,340 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 98 [2018-11-23 12:48:54,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:54,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:54,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:48:54,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:54,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 462 transitions. [2018-11-23 12:48:54,344 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 462 transitions. [2018-11-23 12:48:54,774 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 462 edges. 462 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:54,780 INFO L225 Difference]: With dead ends: 507 [2018-11-23 12:48:54,780 INFO L226 Difference]: Without dead ends: 272 [2018-11-23 12:48:54,781 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:54,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2018-11-23 12:48:54,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 260. [2018-11-23 12:48:54,875 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:54,875 INFO L82 GeneralOperation]: Start isEquivalent. First operand 272 states. Second operand 260 states. [2018-11-23 12:48:54,875 INFO L74 IsIncluded]: Start isIncluded. First operand 272 states. Second operand 260 states. [2018-11-23 12:48:54,875 INFO L87 Difference]: Start difference. First operand 272 states. Second operand 260 states. [2018-11-23 12:48:54,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:54,880 INFO L93 Difference]: Finished difference Result 272 states and 397 transitions. [2018-11-23 12:48:54,880 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 397 transitions. [2018-11-23 12:48:54,881 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:54,881 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:54,881 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 272 states. [2018-11-23 12:48:54,881 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 272 states. [2018-11-23 12:48:54,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:54,885 INFO L93 Difference]: Finished difference Result 272 states and 397 transitions. [2018-11-23 12:48:54,885 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 397 transitions. [2018-11-23 12:48:54,886 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:54,886 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:54,886 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:54,886 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:54,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:54,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 380 transitions. [2018-11-23 12:48:54,890 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 380 transitions. Word has length 98 [2018-11-23 12:48:54,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:54,890 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 380 transitions. [2018-11-23 12:48:54,890 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:54,890 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 380 transitions. [2018-11-23 12:48:54,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2018-11-23 12:48:54,891 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:54,891 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:54,891 INFO L423 AbstractCegarLoop]: === Iteration 37 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:54,891 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:54,892 INFO L82 PathProgramCache]: Analyzing trace with hash -1531434557, now seen corresponding path program 1 times [2018-11-23 12:48:54,892 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:54,892 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:54,892 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:54,893 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:54,893 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:54,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:55,072 INFO L256 TraceCheckUtils]: 0: Hoare triple {46220#true} call ULTIMATE.init(); {46220#true} is VALID [2018-11-23 12:48:55,073 INFO L273 TraceCheckUtils]: 1: Hoare triple {46220#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,073 INFO L273 TraceCheckUtils]: 2: Hoare triple {46220#true} assume true; {46220#true} is VALID [2018-11-23 12:48:55,073 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {46220#true} {46220#true} #633#return; {46220#true} is VALID [2018-11-23 12:48:55,073 INFO L256 TraceCheckUtils]: 4: Hoare triple {46220#true} call #t~ret138 := main(); {46220#true} is VALID [2018-11-23 12:48:55,074 INFO L273 TraceCheckUtils]: 5: Hoare triple {46220#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,074 INFO L256 TraceCheckUtils]: 6: Hoare triple {46220#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {46220#true} is VALID [2018-11-23 12:48:55,074 INFO L273 TraceCheckUtils]: 7: Hoare triple {46220#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,074 INFO L273 TraceCheckUtils]: 8: Hoare triple {46220#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {46220#true} is VALID [2018-11-23 12:48:55,074 INFO L273 TraceCheckUtils]: 9: Hoare triple {46220#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {46220#true} is VALID [2018-11-23 12:48:55,074 INFO L273 TraceCheckUtils]: 10: Hoare triple {46220#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 11: Hoare triple {46220#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 12: Hoare triple {46220#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 13: Hoare triple {46220#true} assume !false; {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 14: Hoare triple {46220#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 15: Hoare triple {46220#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 16: Hoare triple {46220#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 17: Hoare triple {46220#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 18: Hoare triple {46220#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,075 INFO L273 TraceCheckUtils]: 19: Hoare triple {46220#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 20: Hoare triple {46220#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 21: Hoare triple {46220#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 22: Hoare triple {46220#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 23: Hoare triple {46220#true} assume 8464 == #t~mem32;havoc #t~mem32; {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 24: Hoare triple {46220#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 25: Hoare triple {46220#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 26: Hoare triple {46220#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,076 INFO L273 TraceCheckUtils]: 27: Hoare triple {46220#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,077 INFO L273 TraceCheckUtils]: 28: Hoare triple {46220#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {46220#true} is VALID [2018-11-23 12:48:55,078 INFO L273 TraceCheckUtils]: 29: Hoare triple {46220#true} ~skip~0 := 0; {46220#true} is VALID [2018-11-23 12:48:55,078 INFO L273 TraceCheckUtils]: 30: Hoare triple {46220#true} assume !false; {46220#true} is VALID [2018-11-23 12:48:55,078 INFO L273 TraceCheckUtils]: 31: Hoare triple {46220#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,078 INFO L273 TraceCheckUtils]: 32: Hoare triple {46220#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,078 INFO L273 TraceCheckUtils]: 33: Hoare triple {46220#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,078 INFO L273 TraceCheckUtils]: 34: Hoare triple {46220#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 35: Hoare triple {46220#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 36: Hoare triple {46220#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 37: Hoare triple {46220#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 38: Hoare triple {46220#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 39: Hoare triple {46220#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 40: Hoare triple {46220#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,079 INFO L273 TraceCheckUtils]: 41: Hoare triple {46220#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,080 INFO L273 TraceCheckUtils]: 42: Hoare triple {46220#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,080 INFO L273 TraceCheckUtils]: 43: Hoare triple {46220#true} assume 8496 == #t~mem35;havoc #t~mem35; {46220#true} is VALID [2018-11-23 12:48:55,080 INFO L273 TraceCheckUtils]: 44: Hoare triple {46220#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {46220#true} is VALID [2018-11-23 12:48:55,080 INFO L273 TraceCheckUtils]: 45: Hoare triple {46220#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {46220#true} is VALID [2018-11-23 12:48:55,080 INFO L273 TraceCheckUtils]: 46: Hoare triple {46220#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {46220#true} is VALID [2018-11-23 12:48:55,081 INFO L273 TraceCheckUtils]: 47: Hoare triple {46220#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,082 INFO L273 TraceCheckUtils]: 48: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,082 INFO L273 TraceCheckUtils]: 49: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,083 INFO L273 TraceCheckUtils]: 50: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,083 INFO L273 TraceCheckUtils]: 51: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,084 INFO L273 TraceCheckUtils]: 52: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !false; {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,085 INFO L273 TraceCheckUtils]: 53: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,086 INFO L273 TraceCheckUtils]: 54: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,086 INFO L273 TraceCheckUtils]: 55: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,087 INFO L273 TraceCheckUtils]: 56: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,087 INFO L273 TraceCheckUtils]: 57: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,087 INFO L273 TraceCheckUtils]: 58: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,088 INFO L273 TraceCheckUtils]: 59: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,088 INFO L273 TraceCheckUtils]: 60: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,088 INFO L273 TraceCheckUtils]: 61: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,089 INFO L273 TraceCheckUtils]: 62: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,089 INFO L273 TraceCheckUtils]: 63: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,089 INFO L273 TraceCheckUtils]: 64: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,090 INFO L273 TraceCheckUtils]: 65: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:48:55,090 INFO L273 TraceCheckUtils]: 66: Hoare triple {46222#(= 8656 (select (store (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 64) 0) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {46223#(= 8656 |ssl3_accept_#t~mem37|)} is VALID [2018-11-23 12:48:55,090 INFO L273 TraceCheckUtils]: 67: Hoare triple {46223#(= 8656 |ssl3_accept_#t~mem37|)} assume 8512 == #t~mem37;havoc #t~mem37; {46221#false} is VALID [2018-11-23 12:48:55,091 INFO L273 TraceCheckUtils]: 68: Hoare triple {46221#false} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,091 INFO L273 TraceCheckUtils]: 69: Hoare triple {46221#false} assume 0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;~skip~0 := 1; {46221#false} is VALID [2018-11-23 12:48:55,091 INFO L273 TraceCheckUtils]: 70: Hoare triple {46221#false} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,091 INFO L273 TraceCheckUtils]: 71: Hoare triple {46221#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,092 INFO L273 TraceCheckUtils]: 72: Hoare triple {46221#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {46221#false} is VALID [2018-11-23 12:48:55,092 INFO L273 TraceCheckUtils]: 73: Hoare triple {46221#false} ~skip~0 := 0; {46221#false} is VALID [2018-11-23 12:48:55,092 INFO L273 TraceCheckUtils]: 74: Hoare triple {46221#false} assume !false; {46221#false} is VALID [2018-11-23 12:48:55,092 INFO L273 TraceCheckUtils]: 75: Hoare triple {46221#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,092 INFO L273 TraceCheckUtils]: 76: Hoare triple {46221#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,093 INFO L273 TraceCheckUtils]: 77: Hoare triple {46221#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,093 INFO L273 TraceCheckUtils]: 78: Hoare triple {46221#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,093 INFO L273 TraceCheckUtils]: 79: Hoare triple {46221#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,093 INFO L273 TraceCheckUtils]: 80: Hoare triple {46221#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,093 INFO L273 TraceCheckUtils]: 81: Hoare triple {46221#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,093 INFO L273 TraceCheckUtils]: 82: Hoare triple {46221#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 83: Hoare triple {46221#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 84: Hoare triple {46221#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 85: Hoare triple {46221#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 86: Hoare triple {46221#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 87: Hoare triple {46221#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 88: Hoare triple {46221#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 89: Hoare triple {46221#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,094 INFO L273 TraceCheckUtils]: 90: Hoare triple {46221#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,095 INFO L273 TraceCheckUtils]: 91: Hoare triple {46221#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,095 INFO L273 TraceCheckUtils]: 92: Hoare triple {46221#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,095 INFO L273 TraceCheckUtils]: 93: Hoare triple {46221#false} assume 8544 == #t~mem41;havoc #t~mem41; {46221#false} is VALID [2018-11-23 12:48:55,095 INFO L273 TraceCheckUtils]: 94: Hoare triple {46221#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,095 INFO L273 TraceCheckUtils]: 95: Hoare triple {46221#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,095 INFO L273 TraceCheckUtils]: 96: Hoare triple {46221#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {46221#false} is VALID [2018-11-23 12:48:55,096 INFO L273 TraceCheckUtils]: 97: Hoare triple {46221#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {46221#false} is VALID [2018-11-23 12:48:55,096 INFO L273 TraceCheckUtils]: 98: Hoare triple {46221#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {46221#false} is VALID [2018-11-23 12:48:55,096 INFO L273 TraceCheckUtils]: 99: Hoare triple {46221#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {46221#false} is VALID [2018-11-23 12:48:55,096 INFO L273 TraceCheckUtils]: 100: Hoare triple {46221#false} assume 7 == ~blastFlag~0; {46221#false} is VALID [2018-11-23 12:48:55,096 INFO L273 TraceCheckUtils]: 101: Hoare triple {46221#false} assume !false; {46221#false} is VALID [2018-11-23 12:48:55,106 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 12:48:55,106 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:55,107 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:48:55,107 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 102 [2018-11-23 12:48:55,107 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:55,107 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:48:55,206 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:55,207 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:48:55,207 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:48:55,207 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:48:55,207 INFO L87 Difference]: Start difference. First operand 260 states and 380 transitions. Second operand 4 states. [2018-11-23 12:48:56,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:56,493 INFO L93 Difference]: Finished difference Result 530 states and 779 transitions. [2018-11-23 12:48:56,494 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:48:56,494 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 102 [2018-11-23 12:48:56,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:56,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:56,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 521 transitions. [2018-11-23 12:48:56,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:48:56,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 521 transitions. [2018-11-23 12:48:56,498 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 521 transitions. [2018-11-23 12:48:56,995 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 521 edges. 521 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:57,002 INFO L225 Difference]: With dead ends: 530 [2018-11-23 12:48:57,002 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 12:48:57,002 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:48:57,003 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 12:48:57,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 260. [2018-11-23 12:48:57,112 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:57,112 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:57,112 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:57,112 INFO L87 Difference]: Start difference. First operand 295 states. Second operand 260 states. [2018-11-23 12:48:57,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:57,117 INFO L93 Difference]: Finished difference Result 295 states and 426 transitions. [2018-11-23 12:48:57,117 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 426 transitions. [2018-11-23 12:48:57,117 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:57,118 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:57,118 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:57,118 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 295 states. [2018-11-23 12:48:57,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:57,123 INFO L93 Difference]: Finished difference Result 295 states and 426 transitions. [2018-11-23 12:48:57,123 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 426 transitions. [2018-11-23 12:48:57,123 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:57,123 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:57,123 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:57,123 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:57,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 260 states. [2018-11-23 12:48:57,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 379 transitions. [2018-11-23 12:48:57,128 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 379 transitions. Word has length 102 [2018-11-23 12:48:57,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:57,128 INFO L480 AbstractCegarLoop]: Abstraction has 260 states and 379 transitions. [2018-11-23 12:48:57,128 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:48:57,128 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 379 transitions. [2018-11-23 12:48:57,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2018-11-23 12:48:57,128 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:57,129 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:57,129 INFO L423 AbstractCegarLoop]: === Iteration 38 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:57,129 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:57,129 INFO L82 PathProgramCache]: Analyzing trace with hash -144649147, now seen corresponding path program 1 times [2018-11-23 12:48:57,129 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:57,129 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:57,130 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:57,130 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:57,130 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:57,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:57,258 INFO L256 TraceCheckUtils]: 0: Hoare triple {47729#true} call ULTIMATE.init(); {47729#true} is VALID [2018-11-23 12:48:57,258 INFO L273 TraceCheckUtils]: 1: Hoare triple {47729#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,258 INFO L273 TraceCheckUtils]: 2: Hoare triple {47729#true} assume true; {47729#true} is VALID [2018-11-23 12:48:57,258 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {47729#true} {47729#true} #633#return; {47729#true} is VALID [2018-11-23 12:48:57,259 INFO L256 TraceCheckUtils]: 4: Hoare triple {47729#true} call #t~ret138 := main(); {47729#true} is VALID [2018-11-23 12:48:57,259 INFO L273 TraceCheckUtils]: 5: Hoare triple {47729#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,259 INFO L256 TraceCheckUtils]: 6: Hoare triple {47729#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {47729#true} is VALID [2018-11-23 12:48:57,259 INFO L273 TraceCheckUtils]: 7: Hoare triple {47729#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,259 INFO L273 TraceCheckUtils]: 8: Hoare triple {47729#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 9: Hoare triple {47729#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 10: Hoare triple {47729#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 11: Hoare triple {47729#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 12: Hoare triple {47729#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 13: Hoare triple {47729#true} assume !false; {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 14: Hoare triple {47729#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 15: Hoare triple {47729#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 16: Hoare triple {47729#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,260 INFO L273 TraceCheckUtils]: 17: Hoare triple {47729#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 18: Hoare triple {47729#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 19: Hoare triple {47729#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 20: Hoare triple {47729#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 21: Hoare triple {47729#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 22: Hoare triple {47729#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 23: Hoare triple {47729#true} assume 8464 == #t~mem32;havoc #t~mem32; {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 24: Hoare triple {47729#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 25: Hoare triple {47729#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {47729#true} is VALID [2018-11-23 12:48:57,261 INFO L273 TraceCheckUtils]: 26: Hoare triple {47729#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 27: Hoare triple {47729#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 28: Hoare triple {47729#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 29: Hoare triple {47729#true} ~skip~0 := 0; {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 30: Hoare triple {47729#true} assume !false; {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 31: Hoare triple {47729#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 32: Hoare triple {47729#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 33: Hoare triple {47729#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 34: Hoare triple {47729#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,262 INFO L273 TraceCheckUtils]: 35: Hoare triple {47729#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 36: Hoare triple {47729#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 37: Hoare triple {47729#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 38: Hoare triple {47729#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 39: Hoare triple {47729#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 40: Hoare triple {47729#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 41: Hoare triple {47729#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 42: Hoare triple {47729#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 43: Hoare triple {47729#true} assume 8496 == #t~mem35;havoc #t~mem35; {47729#true} is VALID [2018-11-23 12:48:57,263 INFO L273 TraceCheckUtils]: 44: Hoare triple {47729#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {47729#true} is VALID [2018-11-23 12:48:57,264 INFO L273 TraceCheckUtils]: 45: Hoare triple {47729#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,264 INFO L273 TraceCheckUtils]: 46: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,265 INFO L273 TraceCheckUtils]: 47: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,265 INFO L273 TraceCheckUtils]: 48: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call write~int(0, ~s.base, 64 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,268 INFO L273 TraceCheckUtils]: 49: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,268 INFO L273 TraceCheckUtils]: 50: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,271 INFO L273 TraceCheckUtils]: 51: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,271 INFO L273 TraceCheckUtils]: 52: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,274 INFO L273 TraceCheckUtils]: 53: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,274 INFO L273 TraceCheckUtils]: 54: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,274 INFO L273 TraceCheckUtils]: 55: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,275 INFO L273 TraceCheckUtils]: 56: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,275 INFO L273 TraceCheckUtils]: 57: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,275 INFO L273 TraceCheckUtils]: 58: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,292 INFO L273 TraceCheckUtils]: 59: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,300 INFO L273 TraceCheckUtils]: 60: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,309 INFO L273 TraceCheckUtils]: 61: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,309 INFO L273 TraceCheckUtils]: 62: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,311 INFO L273 TraceCheckUtils]: 63: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,311 INFO L273 TraceCheckUtils]: 64: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,314 INFO L273 TraceCheckUtils]: 65: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,314 INFO L273 TraceCheckUtils]: 66: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,314 INFO L273 TraceCheckUtils]: 67: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume 8512 == #t~mem37;havoc #t~mem37; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,315 INFO L273 TraceCheckUtils]: 68: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,315 INFO L273 TraceCheckUtils]: 69: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296;havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;~skip~0 := 1; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,315 INFO L273 TraceCheckUtils]: 70: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,315 INFO L273 TraceCheckUtils]: 71: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,316 INFO L273 TraceCheckUtils]: 72: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,316 INFO L273 TraceCheckUtils]: 73: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} ~skip~0 := 0; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,317 INFO L273 TraceCheckUtils]: 74: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !false; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,317 INFO L273 TraceCheckUtils]: 75: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,318 INFO L273 TraceCheckUtils]: 76: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,318 INFO L273 TraceCheckUtils]: 77: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,319 INFO L273 TraceCheckUtils]: 78: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,319 INFO L273 TraceCheckUtils]: 79: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,320 INFO L273 TraceCheckUtils]: 80: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,320 INFO L273 TraceCheckUtils]: 81: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,321 INFO L273 TraceCheckUtils]: 82: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,321 INFO L273 TraceCheckUtils]: 83: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,322 INFO L273 TraceCheckUtils]: 84: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,322 INFO L273 TraceCheckUtils]: 85: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,323 INFO L273 TraceCheckUtils]: 86: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,323 INFO L273 TraceCheckUtils]: 87: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,324 INFO L273 TraceCheckUtils]: 88: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,324 INFO L273 TraceCheckUtils]: 89: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,325 INFO L273 TraceCheckUtils]: 90: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,325 INFO L273 TraceCheckUtils]: 91: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,326 INFO L273 TraceCheckUtils]: 92: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,326 INFO L273 TraceCheckUtils]: 93: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume 8544 == #t~mem41;havoc #t~mem41; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,327 INFO L273 TraceCheckUtils]: 94: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,327 INFO L273 TraceCheckUtils]: 95: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,328 INFO L273 TraceCheckUtils]: 96: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,328 INFO L273 TraceCheckUtils]: 97: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,329 INFO L273 TraceCheckUtils]: 98: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,329 INFO L273 TraceCheckUtils]: 99: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {47731#(<= ssl3_accept_~blastFlag~0 2)} is VALID [2018-11-23 12:48:57,330 INFO L273 TraceCheckUtils]: 100: Hoare triple {47731#(<= ssl3_accept_~blastFlag~0 2)} assume 7 == ~blastFlag~0; {47730#false} is VALID [2018-11-23 12:48:57,330 INFO L273 TraceCheckUtils]: 101: Hoare triple {47730#false} assume !false; {47730#false} is VALID [2018-11-23 12:48:57,336 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 12:48:57,337 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:57,337 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:57,337 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 102 [2018-11-23 12:48:57,337 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:57,337 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:57,412 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:57,412 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:57,412 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:57,412 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:57,412 INFO L87 Difference]: Start difference. First operand 260 states and 379 transitions. Second operand 3 states. [2018-11-23 12:48:58,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:58,235 INFO L93 Difference]: Finished difference Result 728 states and 1080 transitions. [2018-11-23 12:48:58,235 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:48:58,235 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 102 [2018-11-23 12:48:58,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:48:58,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:58,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 604 transitions. [2018-11-23 12:48:58,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:48:58,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 604 transitions. [2018-11-23 12:48:58,239 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 604 transitions. [2018-11-23 12:48:58,818 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 604 edges. 604 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:58,830 INFO L225 Difference]: With dead ends: 728 [2018-11-23 12:48:58,830 INFO L226 Difference]: Without dead ends: 493 [2018-11-23 12:48:58,831 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:58,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2018-11-23 12:48:59,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 493. [2018-11-23 12:48:59,122 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:48:59,122 INFO L82 GeneralOperation]: Start isEquivalent. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:59,122 INFO L74 IsIncluded]: Start isIncluded. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:59,122 INFO L87 Difference]: Start difference. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:59,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:59,135 INFO L93 Difference]: Finished difference Result 493 states and 723 transitions. [2018-11-23 12:48:59,136 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 12:48:59,136 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:59,136 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:59,136 INFO L74 IsIncluded]: Start isIncluded. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:59,136 INFO L87 Difference]: Start difference. First operand 493 states. Second operand 493 states. [2018-11-23 12:48:59,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:48:59,148 INFO L93 Difference]: Finished difference Result 493 states and 723 transitions. [2018-11-23 12:48:59,148 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 12:48:59,148 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:48:59,148 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:48:59,148 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:48:59,148 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:48:59,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 493 states. [2018-11-23 12:48:59,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 493 states to 493 states and 723 transitions. [2018-11-23 12:48:59,160 INFO L78 Accepts]: Start accepts. Automaton has 493 states and 723 transitions. Word has length 102 [2018-11-23 12:48:59,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:48:59,160 INFO L480 AbstractCegarLoop]: Abstraction has 493 states and 723 transitions. [2018-11-23 12:48:59,160 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:48:59,160 INFO L276 IsEmpty]: Start isEmpty. Operand 493 states and 723 transitions. [2018-11-23 12:48:59,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 12:48:59,161 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:48:59,161 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:48:59,161 INFO L423 AbstractCegarLoop]: === Iteration 39 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:48:59,161 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:48:59,162 INFO L82 PathProgramCache]: Analyzing trace with hash -282131921, now seen corresponding path program 1 times [2018-11-23 12:48:59,162 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:48:59,162 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:48:59,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:59,163 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:48:59,163 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:48:59,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:48:59,231 INFO L256 TraceCheckUtils]: 0: Hoare triple {50113#true} call ULTIMATE.init(); {50113#true} is VALID [2018-11-23 12:48:59,231 INFO L273 TraceCheckUtils]: 1: Hoare triple {50113#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,231 INFO L273 TraceCheckUtils]: 2: Hoare triple {50113#true} assume true; {50113#true} is VALID [2018-11-23 12:48:59,231 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {50113#true} {50113#true} #633#return; {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L256 TraceCheckUtils]: 4: Hoare triple {50113#true} call #t~ret138 := main(); {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L273 TraceCheckUtils]: 5: Hoare triple {50113#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L256 TraceCheckUtils]: 6: Hoare triple {50113#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L273 TraceCheckUtils]: 7: Hoare triple {50113#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L273 TraceCheckUtils]: 8: Hoare triple {50113#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L273 TraceCheckUtils]: 9: Hoare triple {50113#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {50113#true} is VALID [2018-11-23 12:48:59,232 INFO L273 TraceCheckUtils]: 10: Hoare triple {50113#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {50113#true} is VALID [2018-11-23 12:48:59,233 INFO L273 TraceCheckUtils]: 11: Hoare triple {50113#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,233 INFO L273 TraceCheckUtils]: 12: Hoare triple {50113#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {50113#true} is VALID [2018-11-23 12:48:59,233 INFO L273 TraceCheckUtils]: 13: Hoare triple {50113#true} assume !false; {50113#true} is VALID [2018-11-23 12:48:59,233 INFO L273 TraceCheckUtils]: 14: Hoare triple {50113#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,233 INFO L273 TraceCheckUtils]: 15: Hoare triple {50113#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,233 INFO L273 TraceCheckUtils]: 16: Hoare triple {50113#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 17: Hoare triple {50113#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 18: Hoare triple {50113#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 19: Hoare triple {50113#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 20: Hoare triple {50113#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 21: Hoare triple {50113#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 22: Hoare triple {50113#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,234 INFO L273 TraceCheckUtils]: 23: Hoare triple {50113#true} assume 8464 == #t~mem32;havoc #t~mem32; {50113#true} is VALID [2018-11-23 12:48:59,235 INFO L273 TraceCheckUtils]: 24: Hoare triple {50113#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {50113#true} is VALID [2018-11-23 12:48:59,235 INFO L273 TraceCheckUtils]: 25: Hoare triple {50113#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {50113#true} is VALID [2018-11-23 12:48:59,235 INFO L273 TraceCheckUtils]: 26: Hoare triple {50113#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,235 INFO L273 TraceCheckUtils]: 27: Hoare triple {50113#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,235 INFO L273 TraceCheckUtils]: 28: Hoare triple {50113#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {50113#true} is VALID [2018-11-23 12:48:59,235 INFO L273 TraceCheckUtils]: 29: Hoare triple {50113#true} ~skip~0 := 0; {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 30: Hoare triple {50113#true} assume !false; {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 31: Hoare triple {50113#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 32: Hoare triple {50113#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 33: Hoare triple {50113#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 34: Hoare triple {50113#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 35: Hoare triple {50113#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,236 INFO L273 TraceCheckUtils]: 36: Hoare triple {50113#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,237 INFO L273 TraceCheckUtils]: 37: Hoare triple {50113#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,237 INFO L273 TraceCheckUtils]: 38: Hoare triple {50113#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,237 INFO L273 TraceCheckUtils]: 39: Hoare triple {50113#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,237 INFO L273 TraceCheckUtils]: 40: Hoare triple {50113#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,237 INFO L273 TraceCheckUtils]: 41: Hoare triple {50113#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,237 INFO L273 TraceCheckUtils]: 42: Hoare triple {50113#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,238 INFO L273 TraceCheckUtils]: 43: Hoare triple {50113#true} assume 8496 == #t~mem35;havoc #t~mem35; {50113#true} is VALID [2018-11-23 12:48:59,238 INFO L273 TraceCheckUtils]: 44: Hoare triple {50113#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {50113#true} is VALID [2018-11-23 12:48:59,238 INFO L273 TraceCheckUtils]: 45: Hoare triple {50113#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {50113#true} is VALID [2018-11-23 12:48:59,238 INFO L273 TraceCheckUtils]: 46: Hoare triple {50113#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,238 INFO L273 TraceCheckUtils]: 47: Hoare triple {50113#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,238 INFO L273 TraceCheckUtils]: 48: Hoare triple {50113#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 49: Hoare triple {50113#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 50: Hoare triple {50113#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 51: Hoare triple {50113#true} ~skip~0 := 0; {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 52: Hoare triple {50113#true} assume !false; {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 53: Hoare triple {50113#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 54: Hoare triple {50113#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,239 INFO L273 TraceCheckUtils]: 55: Hoare triple {50113#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 56: Hoare triple {50113#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 57: Hoare triple {50113#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 58: Hoare triple {50113#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 59: Hoare triple {50113#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 60: Hoare triple {50113#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 61: Hoare triple {50113#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,240 INFO L273 TraceCheckUtils]: 62: Hoare triple {50113#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,241 INFO L273 TraceCheckUtils]: 63: Hoare triple {50113#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,241 INFO L273 TraceCheckUtils]: 64: Hoare triple {50113#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,241 INFO L273 TraceCheckUtils]: 65: Hoare triple {50113#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,241 INFO L273 TraceCheckUtils]: 66: Hoare triple {50113#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,241 INFO L273 TraceCheckUtils]: 67: Hoare triple {50113#true} assume 8512 == #t~mem37;havoc #t~mem37; {50113#true} is VALID [2018-11-23 12:48:59,241 INFO L273 TraceCheckUtils]: 68: Hoare triple {50113#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {50113#true} is VALID [2018-11-23 12:48:59,242 INFO L273 TraceCheckUtils]: 69: Hoare triple {50113#true} assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {50113#true} is VALID [2018-11-23 12:48:59,246 INFO L273 TraceCheckUtils]: 70: Hoare triple {50113#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 6; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,247 INFO L273 TraceCheckUtils]: 71: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(~ret~0 <= 0); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,250 INFO L273 TraceCheckUtils]: 72: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,250 INFO L273 TraceCheckUtils]: 73: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,252 INFO L273 TraceCheckUtils]: 74: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,252 INFO L273 TraceCheckUtils]: 75: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} ~skip~0 := 0; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,255 INFO L273 TraceCheckUtils]: 76: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !false; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,255 INFO L273 TraceCheckUtils]: 77: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,257 INFO L273 TraceCheckUtils]: 78: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,257 INFO L273 TraceCheckUtils]: 79: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,260 INFO L273 TraceCheckUtils]: 80: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,260 INFO L273 TraceCheckUtils]: 81: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,263 INFO L273 TraceCheckUtils]: 82: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,263 INFO L273 TraceCheckUtils]: 83: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,265 INFO L273 TraceCheckUtils]: 84: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,265 INFO L273 TraceCheckUtils]: 85: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,268 INFO L273 TraceCheckUtils]: 86: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,268 INFO L273 TraceCheckUtils]: 87: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,271 INFO L273 TraceCheckUtils]: 88: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,271 INFO L273 TraceCheckUtils]: 89: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,274 INFO L273 TraceCheckUtils]: 90: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,274 INFO L273 TraceCheckUtils]: 91: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,276 INFO L273 TraceCheckUtils]: 92: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,276 INFO L273 TraceCheckUtils]: 93: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,278 INFO L273 TraceCheckUtils]: 94: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,278 INFO L273 TraceCheckUtils]: 95: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume 8544 == #t~mem41;havoc #t~mem41; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,281 INFO L273 TraceCheckUtils]: 96: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,281 INFO L273 TraceCheckUtils]: 97: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,281 INFO L273 TraceCheckUtils]: 98: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,282 INFO L273 TraceCheckUtils]: 99: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,282 INFO L273 TraceCheckUtils]: 100: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,282 INFO L273 TraceCheckUtils]: 101: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {50115#(<= ssl3_accept_~blastFlag~0 6)} is VALID [2018-11-23 12:48:59,282 INFO L273 TraceCheckUtils]: 102: Hoare triple {50115#(<= ssl3_accept_~blastFlag~0 6)} assume 7 == ~blastFlag~0; {50114#false} is VALID [2018-11-23 12:48:59,283 INFO L273 TraceCheckUtils]: 103: Hoare triple {50114#false} assume !false; {50114#false} is VALID [2018-11-23 12:48:59,288 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:48:59,288 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:48:59,289 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:48:59,289 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 12:48:59,289 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:48:59,289 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:48:59,364 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 78 edges. 78 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:48:59,364 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:48:59,364 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:48:59,364 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:48:59,365 INFO L87 Difference]: Start difference. First operand 493 states and 723 transitions. Second operand 3 states. [2018-11-23 12:49:00,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:00,489 INFO L93 Difference]: Finished difference Result 1196 states and 1769 transitions. [2018-11-23 12:49:00,489 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:49:00,489 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 104 [2018-11-23 12:49:00,489 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:00,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:49:00,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 605 transitions. [2018-11-23 12:49:00,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:49:00,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 605 transitions. [2018-11-23 12:49:00,494 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 605 transitions. [2018-11-23 12:49:01,072 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 605 edges. 605 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:01,098 INFO L225 Difference]: With dead ends: 1196 [2018-11-23 12:49:01,098 INFO L226 Difference]: Without dead ends: 728 [2018-11-23 12:49:01,099 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:49:01,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 728 states. [2018-11-23 12:49:01,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 728 to 726. [2018-11-23 12:49:01,986 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:01,987 INFO L82 GeneralOperation]: Start isEquivalent. First operand 728 states. Second operand 726 states. [2018-11-23 12:49:01,987 INFO L74 IsIncluded]: Start isIncluded. First operand 728 states. Second operand 726 states. [2018-11-23 12:49:01,987 INFO L87 Difference]: Start difference. First operand 728 states. Second operand 726 states. [2018-11-23 12:49:02,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:02,007 INFO L93 Difference]: Finished difference Result 728 states and 1072 transitions. [2018-11-23 12:49:02,007 INFO L276 IsEmpty]: Start isEmpty. Operand 728 states and 1072 transitions. [2018-11-23 12:49:02,008 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:02,008 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:02,008 INFO L74 IsIncluded]: Start isIncluded. First operand 726 states. Second operand 728 states. [2018-11-23 12:49:02,008 INFO L87 Difference]: Start difference. First operand 726 states. Second operand 728 states. [2018-11-23 12:49:02,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:02,025 INFO L93 Difference]: Finished difference Result 728 states and 1072 transitions. [2018-11-23 12:49:02,025 INFO L276 IsEmpty]: Start isEmpty. Operand 728 states and 1072 transitions. [2018-11-23 12:49:02,026 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:02,026 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:02,026 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:02,026 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:02,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 726 states. [2018-11-23 12:49:02,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 726 states to 726 states and 1071 transitions. [2018-11-23 12:49:02,045 INFO L78 Accepts]: Start accepts. Automaton has 726 states and 1071 transitions. Word has length 104 [2018-11-23 12:49:02,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:02,045 INFO L480 AbstractCegarLoop]: Abstraction has 726 states and 1071 transitions. [2018-11-23 12:49:02,045 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:49:02,045 INFO L276 IsEmpty]: Start isEmpty. Operand 726 states and 1071 transitions. [2018-11-23 12:49:02,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2018-11-23 12:49:02,046 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:02,046 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:02,047 INFO L423 AbstractCegarLoop]: === Iteration 40 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:02,047 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:02,047 INFO L82 PathProgramCache]: Analyzing trace with hash -125424114, now seen corresponding path program 1 times [2018-11-23 12:49:02,047 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:02,047 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:02,048 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:02,048 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:02,048 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:02,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:02,213 INFO L256 TraceCheckUtils]: 0: Hoare triple {53762#true} call ULTIMATE.init(); {53762#true} is VALID [2018-11-23 12:49:02,213 INFO L273 TraceCheckUtils]: 1: Hoare triple {53762#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,213 INFO L273 TraceCheckUtils]: 2: Hoare triple {53762#true} assume true; {53762#true} is VALID [2018-11-23 12:49:02,213 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {53762#true} {53762#true} #633#return; {53762#true} is VALID [2018-11-23 12:49:02,213 INFO L256 TraceCheckUtils]: 4: Hoare triple {53762#true} call #t~ret138 := main(); {53762#true} is VALID [2018-11-23 12:49:02,213 INFO L273 TraceCheckUtils]: 5: Hoare triple {53762#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L256 TraceCheckUtils]: 6: Hoare triple {53762#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 7: Hoare triple {53762#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 8: Hoare triple {53762#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 9: Hoare triple {53762#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 10: Hoare triple {53762#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 11: Hoare triple {53762#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 12: Hoare triple {53762#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {53762#true} is VALID [2018-11-23 12:49:02,214 INFO L273 TraceCheckUtils]: 13: Hoare triple {53762#true} assume !false; {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 14: Hoare triple {53762#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 15: Hoare triple {53762#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 16: Hoare triple {53762#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 17: Hoare triple {53762#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 18: Hoare triple {53762#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 19: Hoare triple {53762#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 20: Hoare triple {53762#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 21: Hoare triple {53762#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,215 INFO L273 TraceCheckUtils]: 22: Hoare triple {53762#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 23: Hoare triple {53762#true} assume 8464 == #t~mem32;havoc #t~mem32; {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 24: Hoare triple {53762#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 25: Hoare triple {53762#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 26: Hoare triple {53762#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 27: Hoare triple {53762#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 28: Hoare triple {53762#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 29: Hoare triple {53762#true} ~skip~0 := 0; {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 30: Hoare triple {53762#true} assume !false; {53762#true} is VALID [2018-11-23 12:49:02,216 INFO L273 TraceCheckUtils]: 31: Hoare triple {53762#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 32: Hoare triple {53762#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 33: Hoare triple {53762#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 34: Hoare triple {53762#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 35: Hoare triple {53762#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 36: Hoare triple {53762#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 37: Hoare triple {53762#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 38: Hoare triple {53762#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 39: Hoare triple {53762#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,217 INFO L273 TraceCheckUtils]: 40: Hoare triple {53762#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 41: Hoare triple {53762#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 42: Hoare triple {53762#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 43: Hoare triple {53762#true} assume 8496 == #t~mem35;havoc #t~mem35; {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 44: Hoare triple {53762#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 45: Hoare triple {53762#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 46: Hoare triple {53762#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 47: Hoare triple {53762#true} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 48: Hoare triple {53762#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,218 INFO L273 TraceCheckUtils]: 49: Hoare triple {53762#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 50: Hoare triple {53762#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 51: Hoare triple {53762#true} ~skip~0 := 0; {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 52: Hoare triple {53762#true} assume !false; {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 53: Hoare triple {53762#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 54: Hoare triple {53762#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 55: Hoare triple {53762#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 56: Hoare triple {53762#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 57: Hoare triple {53762#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,219 INFO L273 TraceCheckUtils]: 58: Hoare triple {53762#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 59: Hoare triple {53762#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 60: Hoare triple {53762#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 61: Hoare triple {53762#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 62: Hoare triple {53762#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 63: Hoare triple {53762#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 64: Hoare triple {53762#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 65: Hoare triple {53762#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 66: Hoare triple {53762#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,220 INFO L273 TraceCheckUtils]: 67: Hoare triple {53762#true} assume 8512 == #t~mem37;havoc #t~mem37; {53762#true} is VALID [2018-11-23 12:49:02,221 INFO L273 TraceCheckUtils]: 68: Hoare triple {53762#true} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {53762#true} is VALID [2018-11-23 12:49:02,221 INFO L273 TraceCheckUtils]: 69: Hoare triple {53762#true} assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {53762#true} is VALID [2018-11-23 12:49:02,221 INFO L273 TraceCheckUtils]: 70: Hoare triple {53762#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 6; {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,222 INFO L273 TraceCheckUtils]: 71: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(~ret~0 <= 0); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,224 INFO L273 TraceCheckUtils]: 72: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,224 INFO L273 TraceCheckUtils]: 73: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,227 INFO L273 TraceCheckUtils]: 74: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,230 INFO L273 TraceCheckUtils]: 75: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} ~skip~0 := 0; {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,230 INFO L273 TraceCheckUtils]: 76: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !false; {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,230 INFO L273 TraceCheckUtils]: 77: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,231 INFO L273 TraceCheckUtils]: 78: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,231 INFO L273 TraceCheckUtils]: 79: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,231 INFO L273 TraceCheckUtils]: 80: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,232 INFO L273 TraceCheckUtils]: 81: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,232 INFO L273 TraceCheckUtils]: 82: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,232 INFO L273 TraceCheckUtils]: 83: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,233 INFO L273 TraceCheckUtils]: 84: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,233 INFO L273 TraceCheckUtils]: 85: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,233 INFO L273 TraceCheckUtils]: 86: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,234 INFO L273 TraceCheckUtils]: 87: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,234 INFO L273 TraceCheckUtils]: 88: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,235 INFO L273 TraceCheckUtils]: 89: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,235 INFO L273 TraceCheckUtils]: 90: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,236 INFO L273 TraceCheckUtils]: 91: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,236 INFO L273 TraceCheckUtils]: 92: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,237 INFO L273 TraceCheckUtils]: 93: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,237 INFO L273 TraceCheckUtils]: 94: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,238 INFO L273 TraceCheckUtils]: 95: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,238 INFO L273 TraceCheckUtils]: 96: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,239 INFO L273 TraceCheckUtils]: 97: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,239 INFO L273 TraceCheckUtils]: 98: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,240 INFO L273 TraceCheckUtils]: 99: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,240 INFO L273 TraceCheckUtils]: 100: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,241 INFO L273 TraceCheckUtils]: 101: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,241 INFO L273 TraceCheckUtils]: 102: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,242 INFO L273 TraceCheckUtils]: 103: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,242 INFO L273 TraceCheckUtils]: 104: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,243 INFO L273 TraceCheckUtils]: 105: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,243 INFO L273 TraceCheckUtils]: 106: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume 8640 == #t~mem52;havoc #t~mem52; {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,244 INFO L273 TraceCheckUtils]: 107: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,245 INFO L273 TraceCheckUtils]: 108: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume !(4 == ~blastFlag~0); {53764#(<= 6 ssl3_accept_~blastFlag~0)} is VALID [2018-11-23 12:49:02,245 INFO L273 TraceCheckUtils]: 109: Hoare triple {53764#(<= 6 ssl3_accept_~blastFlag~0)} assume 5 == ~blastFlag~0; {53763#false} is VALID [2018-11-23 12:49:02,245 INFO L273 TraceCheckUtils]: 110: Hoare triple {53763#false} assume !false; {53763#false} is VALID [2018-11-23 12:49:02,252 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 47 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:02,252 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:02,252 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 12:49:02,252 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 111 [2018-11-23 12:49:02,253 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:02,253 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2018-11-23 12:49:02,381 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 85 edges. 85 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:02,382 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 12:49:02,382 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 12:49:02,382 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:49:02,382 INFO L87 Difference]: Start difference. First operand 726 states and 1071 transitions. Second operand 3 states. [2018-11-23 12:49:03,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:03,868 INFO L93 Difference]: Finished difference Result 1662 states and 2463 transitions. [2018-11-23 12:49:03,868 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 12:49:03,868 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 111 [2018-11-23 12:49:03,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:03,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:49:03,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-23 12:49:03,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2018-11-23 12:49:03,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 603 transitions. [2018-11-23 12:49:03,873 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 603 transitions. [2018-11-23 12:49:04,459 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:04,502 INFO L225 Difference]: With dead ends: 1662 [2018-11-23 12:49:04,502 INFO L226 Difference]: Without dead ends: 961 [2018-11-23 12:49:04,503 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 12:49:04,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 961 states. [2018-11-23 12:49:05,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 961 to 959. [2018-11-23 12:49:05,173 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:05,173 INFO L82 GeneralOperation]: Start isEquivalent. First operand 961 states. Second operand 959 states. [2018-11-23 12:49:05,174 INFO L74 IsIncluded]: Start isIncluded. First operand 961 states. Second operand 959 states. [2018-11-23 12:49:05,174 INFO L87 Difference]: Start difference. First operand 961 states. Second operand 959 states. [2018-11-23 12:49:05,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:05,207 INFO L93 Difference]: Finished difference Result 961 states and 1406 transitions. [2018-11-23 12:49:05,207 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1406 transitions. [2018-11-23 12:49:05,208 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:05,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:05,208 INFO L74 IsIncluded]: Start isIncluded. First operand 959 states. Second operand 961 states. [2018-11-23 12:49:05,208 INFO L87 Difference]: Start difference. First operand 959 states. Second operand 961 states. [2018-11-23 12:49:05,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:05,242 INFO L93 Difference]: Finished difference Result 961 states and 1406 transitions. [2018-11-23 12:49:05,242 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1406 transitions. [2018-11-23 12:49:05,243 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:05,243 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:05,243 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:05,243 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:05,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 959 states. [2018-11-23 12:49:05,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 959 states to 959 states and 1405 transitions. [2018-11-23 12:49:05,276 INFO L78 Accepts]: Start accepts. Automaton has 959 states and 1405 transitions. Word has length 111 [2018-11-23 12:49:05,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:05,277 INFO L480 AbstractCegarLoop]: Abstraction has 959 states and 1405 transitions. [2018-11-23 12:49:05,277 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 12:49:05,277 INFO L276 IsEmpty]: Start isEmpty. Operand 959 states and 1405 transitions. [2018-11-23 12:49:05,277 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2018-11-23 12:49:05,278 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:05,278 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:05,278 INFO L423 AbstractCegarLoop]: === Iteration 41 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:05,278 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:05,278 INFO L82 PathProgramCache]: Analyzing trace with hash -1174112374, now seen corresponding path program 1 times [2018-11-23 12:49:05,278 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:05,278 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:05,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:05,279 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:05,279 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:05,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:05,542 INFO L256 TraceCheckUtils]: 0: Hoare triple {58669#true} call ULTIMATE.init(); {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L273 TraceCheckUtils]: 1: Hoare triple {58669#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L273 TraceCheckUtils]: 2: Hoare triple {58669#true} assume true; {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {58669#true} {58669#true} #633#return; {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L256 TraceCheckUtils]: 4: Hoare triple {58669#true} call #t~ret138 := main(); {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L273 TraceCheckUtils]: 5: Hoare triple {58669#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L256 TraceCheckUtils]: 6: Hoare triple {58669#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L273 TraceCheckUtils]: 7: Hoare triple {58669#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,543 INFO L273 TraceCheckUtils]: 8: Hoare triple {58669#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 9: Hoare triple {58669#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 10: Hoare triple {58669#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 11: Hoare triple {58669#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 12: Hoare triple {58669#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 13: Hoare triple {58669#true} assume !false; {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 14: Hoare triple {58669#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 15: Hoare triple {58669#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 16: Hoare triple {58669#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,544 INFO L273 TraceCheckUtils]: 17: Hoare triple {58669#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 18: Hoare triple {58669#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 19: Hoare triple {58669#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 20: Hoare triple {58669#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 21: Hoare triple {58669#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 22: Hoare triple {58669#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 23: Hoare triple {58669#true} assume 8464 == #t~mem32;havoc #t~mem32; {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 24: Hoare triple {58669#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 25: Hoare triple {58669#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {58669#true} is VALID [2018-11-23 12:49:05,545 INFO L273 TraceCheckUtils]: 26: Hoare triple {58669#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 27: Hoare triple {58669#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 28: Hoare triple {58669#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 29: Hoare triple {58669#true} ~skip~0 := 0; {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 30: Hoare triple {58669#true} assume !false; {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 31: Hoare triple {58669#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 32: Hoare triple {58669#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 33: Hoare triple {58669#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 34: Hoare triple {58669#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,546 INFO L273 TraceCheckUtils]: 35: Hoare triple {58669#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 36: Hoare triple {58669#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 37: Hoare triple {58669#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 38: Hoare triple {58669#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 39: Hoare triple {58669#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 40: Hoare triple {58669#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 41: Hoare triple {58669#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,547 INFO L273 TraceCheckUtils]: 42: Hoare triple {58669#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,548 INFO L273 TraceCheckUtils]: 43: Hoare triple {58669#true} assume 8496 == #t~mem35;havoc #t~mem35; {58669#true} is VALID [2018-11-23 12:49:05,548 INFO L273 TraceCheckUtils]: 44: Hoare triple {58669#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {58669#true} is VALID [2018-11-23 12:49:05,548 INFO L273 TraceCheckUtils]: 45: Hoare triple {58669#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {58669#true} is VALID [2018-11-23 12:49:05,548 INFO L273 TraceCheckUtils]: 46: Hoare triple {58669#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,548 INFO L273 TraceCheckUtils]: 47: Hoare triple {58669#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,548 INFO L273 TraceCheckUtils]: 48: Hoare triple {58669#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 49: Hoare triple {58669#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 50: Hoare triple {58669#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 51: Hoare triple {58669#true} ~skip~0 := 0; {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 52: Hoare triple {58669#true} assume !false; {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 53: Hoare triple {58669#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 54: Hoare triple {58669#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 55: Hoare triple {58669#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 56: Hoare triple {58669#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,549 INFO L273 TraceCheckUtils]: 57: Hoare triple {58669#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 58: Hoare triple {58669#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 59: Hoare triple {58669#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 60: Hoare triple {58669#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 61: Hoare triple {58669#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 62: Hoare triple {58669#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 63: Hoare triple {58669#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 64: Hoare triple {58669#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 65: Hoare triple {58669#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,550 INFO L273 TraceCheckUtils]: 66: Hoare triple {58669#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 67: Hoare triple {58669#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 68: Hoare triple {58669#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 69: Hoare triple {58669#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 70: Hoare triple {58669#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 71: Hoare triple {58669#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 72: Hoare triple {58669#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 73: Hoare triple {58669#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 74: Hoare triple {58669#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,551 INFO L273 TraceCheckUtils]: 75: Hoare triple {58669#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 76: Hoare triple {58669#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 77: Hoare triple {58669#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 78: Hoare triple {58669#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 79: Hoare triple {58669#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 80: Hoare triple {58669#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 81: Hoare triple {58669#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 82: Hoare triple {58669#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 83: Hoare triple {58669#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {58669#true} is VALID [2018-11-23 12:49:05,552 INFO L273 TraceCheckUtils]: 84: Hoare triple {58669#true} assume 8656 == #t~mem54;havoc #t~mem54; {58669#true} is VALID [2018-11-23 12:49:05,553 INFO L273 TraceCheckUtils]: 85: Hoare triple {58669#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem117.base, #t~mem117.offset; {58669#true} is VALID [2018-11-23 12:49:05,553 INFO L273 TraceCheckUtils]: 86: Hoare triple {58669#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {58669#true} is VALID [2018-11-23 12:49:05,553 INFO L273 TraceCheckUtils]: 87: Hoare triple {58669#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {58669#true} is VALID [2018-11-23 12:49:05,554 INFO L273 TraceCheckUtils]: 88: Hoare triple {58669#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,554 INFO L273 TraceCheckUtils]: 89: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == ~tmp___10~0); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,556 INFO L273 TraceCheckUtils]: 90: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,556 INFO L273 TraceCheckUtils]: 91: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,558 INFO L273 TraceCheckUtils]: 92: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,558 INFO L273 TraceCheckUtils]: 93: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,558 INFO L273 TraceCheckUtils]: 94: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,559 INFO L273 TraceCheckUtils]: 95: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,560 INFO L273 TraceCheckUtils]: 96: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,560 INFO L273 TraceCheckUtils]: 97: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,560 INFO L273 TraceCheckUtils]: 98: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,561 INFO L273 TraceCheckUtils]: 99: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,561 INFO L273 TraceCheckUtils]: 100: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,561 INFO L273 TraceCheckUtils]: 101: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,579 INFO L273 TraceCheckUtils]: 102: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,588 INFO L273 TraceCheckUtils]: 103: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,603 INFO L273 TraceCheckUtils]: 104: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,611 INFO L273 TraceCheckUtils]: 105: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,625 INFO L273 TraceCheckUtils]: 106: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,634 INFO L273 TraceCheckUtils]: 107: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,647 INFO L273 TraceCheckUtils]: 108: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,656 INFO L273 TraceCheckUtils]: 109: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,670 INFO L273 TraceCheckUtils]: 110: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,678 INFO L273 TraceCheckUtils]: 111: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,692 INFO L273 TraceCheckUtils]: 112: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,701 INFO L273 TraceCheckUtils]: 113: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,713 INFO L273 TraceCheckUtils]: 114: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,726 INFO L273 TraceCheckUtils]: 115: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,738 INFO L273 TraceCheckUtils]: 116: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,751 INFO L273 TraceCheckUtils]: 117: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,760 INFO L273 TraceCheckUtils]: 118: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,773 INFO L273 TraceCheckUtils]: 119: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,785 INFO L273 TraceCheckUtils]: 120: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,798 INFO L273 TraceCheckUtils]: 121: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:05,811 INFO L273 TraceCheckUtils]: 122: Hoare triple {58671#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {58672#(= 8672 |ssl3_accept_#t~mem52|)} is VALID [2018-11-23 12:49:05,823 INFO L273 TraceCheckUtils]: 123: Hoare triple {58672#(= 8672 |ssl3_accept_#t~mem52|)} assume 8640 == #t~mem52;havoc #t~mem52; {58670#false} is VALID [2018-11-23 12:49:05,824 INFO L273 TraceCheckUtils]: 124: Hoare triple {58670#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {58670#false} is VALID [2018-11-23 12:49:05,824 INFO L273 TraceCheckUtils]: 125: Hoare triple {58670#false} assume !(4 == ~blastFlag~0); {58670#false} is VALID [2018-11-23 12:49:05,824 INFO L273 TraceCheckUtils]: 126: Hoare triple {58670#false} assume 5 == ~blastFlag~0; {58670#false} is VALID [2018-11-23 12:49:05,824 INFO L273 TraceCheckUtils]: 127: Hoare triple {58670#false} assume !false; {58670#false} is VALID [2018-11-23 12:49:05,841 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:05,842 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:05,842 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:05,842 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 128 [2018-11-23 12:49:05,842 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:05,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:05,965 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 102 edges. 102 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:05,966 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:05,966 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:05,966 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:05,966 INFO L87 Difference]: Start difference. First operand 959 states and 1405 transitions. Second operand 4 states. [2018-11-23 12:49:09,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:09,708 INFO L93 Difference]: Finished difference Result 2303 states and 3401 transitions. [2018-11-23 12:49:09,709 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:49:09,709 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 128 [2018-11-23 12:49:09,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:09,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:09,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 569 transitions. [2018-11-23 12:49:09,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:09,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 569 transitions. [2018-11-23 12:49:09,713 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 569 transitions. [2018-11-23 12:49:10,300 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 569 edges. 569 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:10,372 INFO L225 Difference]: With dead ends: 2303 [2018-11-23 12:49:10,372 INFO L226 Difference]: Without dead ends: 1369 [2018-11-23 12:49:10,374 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:49:10,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1369 states. [2018-11-23 12:49:12,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1369 to 1115. [2018-11-23 12:49:12,438 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:12,438 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1369 states. Second operand 1115 states. [2018-11-23 12:49:12,439 INFO L74 IsIncluded]: Start isIncluded. First operand 1369 states. Second operand 1115 states. [2018-11-23 12:49:12,439 INFO L87 Difference]: Start difference. First operand 1369 states. Second operand 1115 states. [2018-11-23 12:49:12,497 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:12,498 INFO L93 Difference]: Finished difference Result 1369 states and 2020 transitions. [2018-11-23 12:49:12,498 INFO L276 IsEmpty]: Start isEmpty. Operand 1369 states and 2020 transitions. [2018-11-23 12:49:12,499 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:12,499 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:12,499 INFO L74 IsIncluded]: Start isIncluded. First operand 1115 states. Second operand 1369 states. [2018-11-23 12:49:12,499 INFO L87 Difference]: Start difference. First operand 1115 states. Second operand 1369 states. [2018-11-23 12:49:12,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:12,554 INFO L93 Difference]: Finished difference Result 1369 states and 2020 transitions. [2018-11-23 12:49:12,554 INFO L276 IsEmpty]: Start isEmpty. Operand 1369 states and 2020 transitions. [2018-11-23 12:49:12,555 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:12,555 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:12,555 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:12,555 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:12,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1115 states. [2018-11-23 12:49:12,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1115 states to 1115 states and 1689 transitions. [2018-11-23 12:49:12,597 INFO L78 Accepts]: Start accepts. Automaton has 1115 states and 1689 transitions. Word has length 128 [2018-11-23 12:49:12,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:12,597 INFO L480 AbstractCegarLoop]: Abstraction has 1115 states and 1689 transitions. [2018-11-23 12:49:12,597 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:49:12,597 INFO L276 IsEmpty]: Start isEmpty. Operand 1115 states and 1689 transitions. [2018-11-23 12:49:12,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 130 [2018-11-23 12:49:12,598 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:12,599 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:12,599 INFO L423 AbstractCegarLoop]: === Iteration 42 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:12,599 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:12,599 INFO L82 PathProgramCache]: Analyzing trace with hash 2040039334, now seen corresponding path program 1 times [2018-11-23 12:49:12,599 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:12,599 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:12,600 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:12,600 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:12,600 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:12,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:13,095 INFO L256 TraceCheckUtils]: 0: Hoare triple {65311#true} call ULTIMATE.init(); {65311#true} is VALID [2018-11-23 12:49:13,095 INFO L273 TraceCheckUtils]: 1: Hoare triple {65311#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,096 INFO L273 TraceCheckUtils]: 2: Hoare triple {65311#true} assume true; {65311#true} is VALID [2018-11-23 12:49:13,096 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {65311#true} {65311#true} #633#return; {65311#true} is VALID [2018-11-23 12:49:13,096 INFO L256 TraceCheckUtils]: 4: Hoare triple {65311#true} call #t~ret138 := main(); {65311#true} is VALID [2018-11-23 12:49:13,096 INFO L273 TraceCheckUtils]: 5: Hoare triple {65311#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,096 INFO L256 TraceCheckUtils]: 6: Hoare triple {65311#true} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {65311#true} is VALID [2018-11-23 12:49:13,097 INFO L273 TraceCheckUtils]: 7: Hoare triple {65311#true} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,097 INFO L273 TraceCheckUtils]: 8: Hoare triple {65311#true} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {65311#true} is VALID [2018-11-23 12:49:13,097 INFO L273 TraceCheckUtils]: 9: Hoare triple {65311#true} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {65311#true} is VALID [2018-11-23 12:49:13,097 INFO L273 TraceCheckUtils]: 10: Hoare triple {65311#true} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {65311#true} is VALID [2018-11-23 12:49:13,097 INFO L273 TraceCheckUtils]: 11: Hoare triple {65311#true} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,097 INFO L273 TraceCheckUtils]: 12: Hoare triple {65311#true} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {65311#true} is VALID [2018-11-23 12:49:13,098 INFO L273 TraceCheckUtils]: 13: Hoare triple {65311#true} assume !false; {65311#true} is VALID [2018-11-23 12:49:13,098 INFO L273 TraceCheckUtils]: 14: Hoare triple {65311#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,098 INFO L273 TraceCheckUtils]: 15: Hoare triple {65311#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,098 INFO L273 TraceCheckUtils]: 16: Hoare triple {65311#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,098 INFO L273 TraceCheckUtils]: 17: Hoare triple {65311#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,098 INFO L273 TraceCheckUtils]: 18: Hoare triple {65311#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,099 INFO L273 TraceCheckUtils]: 19: Hoare triple {65311#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,099 INFO L273 TraceCheckUtils]: 20: Hoare triple {65311#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,099 INFO L273 TraceCheckUtils]: 21: Hoare triple {65311#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,099 INFO L273 TraceCheckUtils]: 22: Hoare triple {65311#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,099 INFO L273 TraceCheckUtils]: 23: Hoare triple {65311#true} assume 8464 == #t~mem32;havoc #t~mem32; {65311#true} is VALID [2018-11-23 12:49:13,099 INFO L273 TraceCheckUtils]: 24: Hoare triple {65311#true} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {65311#true} is VALID [2018-11-23 12:49:13,100 INFO L273 TraceCheckUtils]: 25: Hoare triple {65311#true} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {65311#true} is VALID [2018-11-23 12:49:13,100 INFO L273 TraceCheckUtils]: 26: Hoare triple {65311#true} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,100 INFO L273 TraceCheckUtils]: 27: Hoare triple {65311#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,100 INFO L273 TraceCheckUtils]: 28: Hoare triple {65311#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {65311#true} is VALID [2018-11-23 12:49:13,100 INFO L273 TraceCheckUtils]: 29: Hoare triple {65311#true} ~skip~0 := 0; {65311#true} is VALID [2018-11-23 12:49:13,100 INFO L273 TraceCheckUtils]: 30: Hoare triple {65311#true} assume !false; {65311#true} is VALID [2018-11-23 12:49:13,101 INFO L273 TraceCheckUtils]: 31: Hoare triple {65311#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,101 INFO L273 TraceCheckUtils]: 32: Hoare triple {65311#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,101 INFO L273 TraceCheckUtils]: 33: Hoare triple {65311#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,101 INFO L273 TraceCheckUtils]: 34: Hoare triple {65311#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,101 INFO L273 TraceCheckUtils]: 35: Hoare triple {65311#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,102 INFO L273 TraceCheckUtils]: 36: Hoare triple {65311#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,102 INFO L273 TraceCheckUtils]: 37: Hoare triple {65311#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,102 INFO L273 TraceCheckUtils]: 38: Hoare triple {65311#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,102 INFO L273 TraceCheckUtils]: 39: Hoare triple {65311#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,102 INFO L273 TraceCheckUtils]: 40: Hoare triple {65311#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,103 INFO L273 TraceCheckUtils]: 41: Hoare triple {65311#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,103 INFO L273 TraceCheckUtils]: 42: Hoare triple {65311#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,103 INFO L273 TraceCheckUtils]: 43: Hoare triple {65311#true} assume 8496 == #t~mem35;havoc #t~mem35; {65311#true} is VALID [2018-11-23 12:49:13,103 INFO L273 TraceCheckUtils]: 44: Hoare triple {65311#true} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {65311#true} is VALID [2018-11-23 12:49:13,103 INFO L273 TraceCheckUtils]: 45: Hoare triple {65311#true} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {65311#true} is VALID [2018-11-23 12:49:13,104 INFO L273 TraceCheckUtils]: 46: Hoare triple {65311#true} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,104 INFO L273 TraceCheckUtils]: 47: Hoare triple {65311#true} assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,104 INFO L273 TraceCheckUtils]: 48: Hoare triple {65311#true} call write~int(0, ~s.base, 64 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,104 INFO L273 TraceCheckUtils]: 49: Hoare triple {65311#true} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,104 INFO L273 TraceCheckUtils]: 50: Hoare triple {65311#true} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {65311#true} is VALID [2018-11-23 12:49:13,105 INFO L273 TraceCheckUtils]: 51: Hoare triple {65311#true} ~skip~0 := 0; {65311#true} is VALID [2018-11-23 12:49:13,105 INFO L273 TraceCheckUtils]: 52: Hoare triple {65311#true} assume !false; {65311#true} is VALID [2018-11-23 12:49:13,105 INFO L273 TraceCheckUtils]: 53: Hoare triple {65311#true} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,105 INFO L273 TraceCheckUtils]: 54: Hoare triple {65311#true} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,105 INFO L273 TraceCheckUtils]: 55: Hoare triple {65311#true} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,106 INFO L273 TraceCheckUtils]: 56: Hoare triple {65311#true} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,106 INFO L273 TraceCheckUtils]: 57: Hoare triple {65311#true} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,106 INFO L273 TraceCheckUtils]: 58: Hoare triple {65311#true} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,106 INFO L273 TraceCheckUtils]: 59: Hoare triple {65311#true} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,106 INFO L273 TraceCheckUtils]: 60: Hoare triple {65311#true} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,107 INFO L273 TraceCheckUtils]: 61: Hoare triple {65311#true} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,107 INFO L273 TraceCheckUtils]: 62: Hoare triple {65311#true} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,107 INFO L273 TraceCheckUtils]: 63: Hoare triple {65311#true} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,107 INFO L273 TraceCheckUtils]: 64: Hoare triple {65311#true} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,108 INFO L273 TraceCheckUtils]: 65: Hoare triple {65311#true} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,108 INFO L273 TraceCheckUtils]: 66: Hoare triple {65311#true} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,108 INFO L273 TraceCheckUtils]: 67: Hoare triple {65311#true} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,108 INFO L273 TraceCheckUtils]: 68: Hoare triple {65311#true} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,108 INFO L273 TraceCheckUtils]: 69: Hoare triple {65311#true} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,109 INFO L273 TraceCheckUtils]: 70: Hoare triple {65311#true} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,109 INFO L273 TraceCheckUtils]: 71: Hoare triple {65311#true} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,109 INFO L273 TraceCheckUtils]: 72: Hoare triple {65311#true} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,109 INFO L273 TraceCheckUtils]: 73: Hoare triple {65311#true} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,109 INFO L273 TraceCheckUtils]: 74: Hoare triple {65311#true} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,110 INFO L273 TraceCheckUtils]: 75: Hoare triple {65311#true} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,110 INFO L273 TraceCheckUtils]: 76: Hoare triple {65311#true} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,110 INFO L273 TraceCheckUtils]: 77: Hoare triple {65311#true} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,110 INFO L273 TraceCheckUtils]: 78: Hoare triple {65311#true} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,110 INFO L273 TraceCheckUtils]: 79: Hoare triple {65311#true} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,111 INFO L273 TraceCheckUtils]: 80: Hoare triple {65311#true} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,111 INFO L273 TraceCheckUtils]: 81: Hoare triple {65311#true} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,111 INFO L273 TraceCheckUtils]: 82: Hoare triple {65311#true} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,111 INFO L273 TraceCheckUtils]: 83: Hoare triple {65311#true} assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); {65311#true} is VALID [2018-11-23 12:49:13,111 INFO L273 TraceCheckUtils]: 84: Hoare triple {65311#true} assume 8656 == #t~mem54;havoc #t~mem54; {65311#true} is VALID [2018-11-23 12:49:13,112 INFO L273 TraceCheckUtils]: 85: Hoare triple {65311#true} call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem119.base, #t~mem119.offset;havoc #t~mem117.base, #t~mem117.offset; {65311#true} is VALID [2018-11-23 12:49:13,112 INFO L273 TraceCheckUtils]: 86: Hoare triple {65311#true} assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; {65311#true} is VALID [2018-11-23 12:49:13,112 INFO L273 TraceCheckUtils]: 87: Hoare triple {65311#true} assume 2 == ~blastFlag~0;~blastFlag~0 := 3; {65311#true} is VALID [2018-11-23 12:49:13,129 INFO L273 TraceCheckUtils]: 88: Hoare triple {65311#true} assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,138 INFO L273 TraceCheckUtils]: 89: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == ~tmp___10~0); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,150 INFO L273 TraceCheckUtils]: 90: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,163 INFO L273 TraceCheckUtils]: 91: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,175 INFO L273 TraceCheckUtils]: 92: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} ~skip~0 := 0; {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,189 INFO L273 TraceCheckUtils]: 93: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !false; {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,199 INFO L273 TraceCheckUtils]: 94: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,212 INFO L273 TraceCheckUtils]: 95: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,225 INFO L273 TraceCheckUtils]: 96: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,237 INFO L273 TraceCheckUtils]: 97: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,253 INFO L273 TraceCheckUtils]: 98: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,262 INFO L273 TraceCheckUtils]: 99: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,275 INFO L273 TraceCheckUtils]: 100: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,284 INFO L273 TraceCheckUtils]: 101: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,284 INFO L273 TraceCheckUtils]: 102: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,285 INFO L273 TraceCheckUtils]: 103: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,285 INFO L273 TraceCheckUtils]: 104: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,287 INFO L273 TraceCheckUtils]: 105: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,287 INFO L273 TraceCheckUtils]: 106: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,289 INFO L273 TraceCheckUtils]: 107: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,289 INFO L273 TraceCheckUtils]: 108: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,291 INFO L273 TraceCheckUtils]: 109: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,291 INFO L273 TraceCheckUtils]: 110: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,293 INFO L273 TraceCheckUtils]: 111: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,293 INFO L273 TraceCheckUtils]: 112: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,293 INFO L273 TraceCheckUtils]: 113: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,294 INFO L273 TraceCheckUtils]: 114: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,294 INFO L273 TraceCheckUtils]: 115: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,294 INFO L273 TraceCheckUtils]: 116: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,294 INFO L273 TraceCheckUtils]: 117: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,295 INFO L273 TraceCheckUtils]: 118: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,295 INFO L273 TraceCheckUtils]: 119: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,295 INFO L273 TraceCheckUtils]: 120: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,296 INFO L273 TraceCheckUtils]: 121: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,296 INFO L273 TraceCheckUtils]: 122: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} is VALID [2018-11-23 12:49:13,297 INFO L273 TraceCheckUtils]: 123: Hoare triple {65313#(= 8672 (select (select |#memory_int| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 52)))} assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); {65314#(= 8672 |ssl3_accept_#t~mem53|)} is VALID [2018-11-23 12:49:13,297 INFO L273 TraceCheckUtils]: 124: Hoare triple {65314#(= 8672 |ssl3_accept_#t~mem53|)} assume 8641 == #t~mem53;havoc #t~mem53; {65312#false} is VALID [2018-11-23 12:49:13,298 INFO L273 TraceCheckUtils]: 125: Hoare triple {65312#false} assume -2147483648 <= #t~nondet115 && #t~nondet115 <= 2147483647;~ret~0 := #t~nondet115;havoc #t~nondet115; {65312#false} is VALID [2018-11-23 12:49:13,298 INFO L273 TraceCheckUtils]: 126: Hoare triple {65312#false} assume !(4 == ~blastFlag~0); {65312#false} is VALID [2018-11-23 12:49:13,298 INFO L273 TraceCheckUtils]: 127: Hoare triple {65312#false} assume 5 == ~blastFlag~0; {65312#false} is VALID [2018-11-23 12:49:13,298 INFO L273 TraceCheckUtils]: 128: Hoare triple {65312#false} assume !false; {65312#false} is VALID [2018-11-23 12:49:13,312 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 63 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 12:49:13,312 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:13,312 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 12:49:13,313 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 129 [2018-11-23 12:49:13,313 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:13,313 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2018-11-23 12:49:13,480 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 103 edges. 103 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:13,480 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 12:49:13,480 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 12:49:13,480 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 12:49:13,481 INFO L87 Difference]: Start difference. First operand 1115 states and 1689 transitions. Second operand 4 states. [2018-11-23 12:49:16,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:16,828 INFO L93 Difference]: Finished difference Result 2433 states and 3649 transitions. [2018-11-23 12:49:16,828 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 12:49:16,828 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 129 [2018-11-23 12:49:16,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:16,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:16,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 557 transitions. [2018-11-23 12:49:16,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2018-11-23 12:49:16,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 557 transitions. [2018-11-23 12:49:16,833 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 557 transitions. [2018-11-23 12:49:17,408 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 557 edges. 557 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:17,478 INFO L225 Difference]: With dead ends: 2433 [2018-11-23 12:49:17,478 INFO L226 Difference]: Without dead ends: 1343 [2018-11-23 12:49:17,480 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 12:49:17,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1343 states. [2018-11-23 12:49:18,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1343 to 1075. [2018-11-23 12:49:18,409 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:18,409 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1343 states. Second operand 1075 states. [2018-11-23 12:49:18,410 INFO L74 IsIncluded]: Start isIncluded. First operand 1343 states. Second operand 1075 states. [2018-11-23 12:49:18,410 INFO L87 Difference]: Start difference. First operand 1343 states. Second operand 1075 states. [2018-11-23 12:49:18,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:18,475 INFO L93 Difference]: Finished difference Result 1343 states and 1984 transitions. [2018-11-23 12:49:18,475 INFO L276 IsEmpty]: Start isEmpty. Operand 1343 states and 1984 transitions. [2018-11-23 12:49:18,476 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:18,476 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:18,476 INFO L74 IsIncluded]: Start isIncluded. First operand 1075 states. Second operand 1343 states. [2018-11-23 12:49:18,476 INFO L87 Difference]: Start difference. First operand 1075 states. Second operand 1343 states. [2018-11-23 12:49:18,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:18,528 INFO L93 Difference]: Finished difference Result 1343 states and 1984 transitions. [2018-11-23 12:49:18,528 INFO L276 IsEmpty]: Start isEmpty. Operand 1343 states and 1984 transitions. [2018-11-23 12:49:18,529 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:18,529 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:18,529 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:18,529 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:18,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1075 states. [2018-11-23 12:49:18,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1613 transitions. [2018-11-23 12:49:18,569 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1613 transitions. Word has length 129 [2018-11-23 12:49:18,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:18,569 INFO L480 AbstractCegarLoop]: Abstraction has 1075 states and 1613 transitions. [2018-11-23 12:49:18,569 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 12:49:18,569 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1613 transitions. [2018-11-23 12:49:18,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 12:49:18,570 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:18,570 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:18,571 INFO L423 AbstractCegarLoop]: === Iteration 43 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:18,571 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:18,571 INFO L82 PathProgramCache]: Analyzing trace with hash 2028637021, now seen corresponding path program 1 times [2018-11-23 12:49:18,571 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:18,571 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:18,572 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:18,572 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:18,572 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:18,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 12:49:19,393 INFO L256 TraceCheckUtils]: 0: Hoare triple {71994#true} call ULTIMATE.init(); {71994#true} is VALID [2018-11-23 12:49:19,393 INFO L273 TraceCheckUtils]: 1: Hoare triple {71994#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); {71994#true} is VALID [2018-11-23 12:49:19,393 INFO L273 TraceCheckUtils]: 2: Hoare triple {71994#true} assume true; {71994#true} is VALID [2018-11-23 12:49:19,393 INFO L268 TraceCheckUtils]: 3: Hoare quadruple {71994#true} {71994#true} #633#return; {71994#true} is VALID [2018-11-23 12:49:19,394 INFO L256 TraceCheckUtils]: 4: Hoare triple {71994#true} call #t~ret138 := main(); {71994#true} is VALID [2018-11-23 12:49:19,396 INFO L273 TraceCheckUtils]: 5: Hoare triple {71994#true} havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); {71996#(not (= main_~s~0.base (select (select |#memory_$Pointer$.base| main_~s~0.base) (+ main_~s~0.offset 84))))} is VALID [2018-11-23 12:49:19,397 INFO L256 TraceCheckUtils]: 6: Hoare triple {71996#(not (= main_~s~0.base (select (select |#memory_$Pointer$.base| main_~s~0.base) (+ main_~s~0.offset 84))))} call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); {71997#(not (= |ssl3_accept_#in~s.base| (select (select |#memory_$Pointer$.base| |ssl3_accept_#in~s.base|) (+ |ssl3_accept_#in~s.offset| 84))))} is VALID [2018-11-23 12:49:19,399 INFO L273 TraceCheckUtils]: 7: Hoare triple {71997#(not (= |ssl3_accept_#in~s.base| (select (select |#memory_$Pointer$.base| |ssl3_accept_#in~s.base|) (+ |ssl3_accept_#in~s.offset| 84))))} ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,400 INFO L273 TraceCheckUtils]: 8: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,400 INFO L273 TraceCheckUtils]: 9: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,401 INFO L273 TraceCheckUtils]: 10: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,401 INFO L273 TraceCheckUtils]: 11: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,401 INFO L273 TraceCheckUtils]: 12: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,402 INFO L273 TraceCheckUtils]: 13: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !false; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,402 INFO L273 TraceCheckUtils]: 14: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,402 INFO L273 TraceCheckUtils]: 15: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,402 INFO L273 TraceCheckUtils]: 16: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,403 INFO L273 TraceCheckUtils]: 17: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,403 INFO L273 TraceCheckUtils]: 18: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,403 INFO L273 TraceCheckUtils]: 19: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,404 INFO L273 TraceCheckUtils]: 20: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,404 INFO L273 TraceCheckUtils]: 21: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,405 INFO L273 TraceCheckUtils]: 22: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,406 INFO L273 TraceCheckUtils]: 23: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 8464 == #t~mem32;havoc #t~mem32; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,407 INFO L273 TraceCheckUtils]: 24: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,407 INFO L273 TraceCheckUtils]: 25: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 0 == ~blastFlag~0;~blastFlag~0 := 1; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,409 INFO L273 TraceCheckUtils]: 26: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,410 INFO L273 TraceCheckUtils]: 27: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,410 INFO L273 TraceCheckUtils]: 28: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,411 INFO L273 TraceCheckUtils]: 29: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} ~skip~0 := 0; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,411 INFO L273 TraceCheckUtils]: 30: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !false; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,412 INFO L273 TraceCheckUtils]: 31: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,412 INFO L273 TraceCheckUtils]: 32: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,413 INFO L273 TraceCheckUtils]: 33: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,413 INFO L273 TraceCheckUtils]: 34: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,414 INFO L273 TraceCheckUtils]: 35: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,414 INFO L273 TraceCheckUtils]: 36: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,415 INFO L273 TraceCheckUtils]: 37: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,415 INFO L273 TraceCheckUtils]: 38: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,416 INFO L273 TraceCheckUtils]: 39: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,416 INFO L273 TraceCheckUtils]: 40: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,417 INFO L273 TraceCheckUtils]: 41: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,417 INFO L273 TraceCheckUtils]: 42: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,418 INFO L273 TraceCheckUtils]: 43: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 8496 == #t~mem35;havoc #t~mem35; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,418 INFO L273 TraceCheckUtils]: 44: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,419 INFO L273 TraceCheckUtils]: 45: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 1 == ~blastFlag~0;~blastFlag~0 := 2; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,419 INFO L273 TraceCheckUtils]: 46: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,420 INFO L273 TraceCheckUtils]: 47: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,422 INFO L273 TraceCheckUtils]: 48: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call write~int(0, ~s.base, 64 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,422 INFO L273 TraceCheckUtils]: 49: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,423 INFO L273 TraceCheckUtils]: 50: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,423 INFO L273 TraceCheckUtils]: 51: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} ~skip~0 := 0; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,424 INFO L273 TraceCheckUtils]: 52: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !false; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,424 INFO L273 TraceCheckUtils]: 53: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,425 INFO L273 TraceCheckUtils]: 54: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,425 INFO L273 TraceCheckUtils]: 55: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,426 INFO L273 TraceCheckUtils]: 56: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,426 INFO L273 TraceCheckUtils]: 57: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,427 INFO L273 TraceCheckUtils]: 58: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,427 INFO L273 TraceCheckUtils]: 59: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,428 INFO L273 TraceCheckUtils]: 60: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,428 INFO L273 TraceCheckUtils]: 61: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,429 INFO L273 TraceCheckUtils]: 62: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,429 INFO L273 TraceCheckUtils]: 63: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,430 INFO L273 TraceCheckUtils]: 64: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,430 INFO L273 TraceCheckUtils]: 65: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,431 INFO L273 TraceCheckUtils]: 66: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,431 INFO L273 TraceCheckUtils]: 67: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 8512 == #t~mem37;havoc #t~mem37; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,432 INFO L273 TraceCheckUtils]: 68: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,432 INFO L273 TraceCheckUtils]: 69: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,433 INFO L273 TraceCheckUtils]: 70: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 2 == ~blastFlag~0;~blastFlag~0 := 6; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,433 INFO L273 TraceCheckUtils]: 71: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(~ret~0 <= 0); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,435 INFO L273 TraceCheckUtils]: 72: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,435 INFO L273 TraceCheckUtils]: 73: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,436 INFO L273 TraceCheckUtils]: 74: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,436 INFO L273 TraceCheckUtils]: 75: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} ~skip~0 := 0; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,437 INFO L273 TraceCheckUtils]: 76: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !false; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,437 INFO L273 TraceCheckUtils]: 77: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,438 INFO L273 TraceCheckUtils]: 78: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,438 INFO L273 TraceCheckUtils]: 79: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,439 INFO L273 TraceCheckUtils]: 80: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,439 INFO L273 TraceCheckUtils]: 81: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,440 INFO L273 TraceCheckUtils]: 82: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,440 INFO L273 TraceCheckUtils]: 83: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,441 INFO L273 TraceCheckUtils]: 84: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,441 INFO L273 TraceCheckUtils]: 85: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,442 INFO L273 TraceCheckUtils]: 86: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,442 INFO L273 TraceCheckUtils]: 87: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,443 INFO L273 TraceCheckUtils]: 88: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,443 INFO L273 TraceCheckUtils]: 89: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,444 INFO L273 TraceCheckUtils]: 90: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,444 INFO L273 TraceCheckUtils]: 91: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,445 INFO L273 TraceCheckUtils]: 92: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,445 INFO L273 TraceCheckUtils]: 93: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume 8528 == #t~mem39;havoc #t~mem39; {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,446 INFO L273 TraceCheckUtils]: 94: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4);call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4);~l~0 := #t~mem78;havoc #t~mem78;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem77.base, #t~mem77.offset;call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} is VALID [2018-11-23 12:49:19,448 INFO L273 TraceCheckUtils]: 95: Hoare triple {71998#(not (= ssl3_accept_~s.base (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))))} assume !(0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296);havoc #t~mem79;call #t~mem81.base, #t~mem81.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(0, #t~mem81.base, 871 + #t~mem81.offset, 4);havoc #t~mem81.base, #t~mem81.offset; {71999#(= 0 (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))) (+ (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84)) 871)))} is VALID [2018-11-23 12:49:19,450 INFO L273 TraceCheckUtils]: 96: Hoare triple {71999#(= 0 (select (select |#memory_int| (select (select |#memory_$Pointer$.base| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84))) (+ (select (select |#memory_$Pointer$.offset| ssl3_accept_~s.base) (+ ssl3_accept_~s.offset 84)) 871)))} call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); {72000#(= 0 |ssl3_accept_#t~mem83|)} is VALID [2018-11-23 12:49:19,459 INFO L273 TraceCheckUtils]: 97: Hoare triple {72000#(= 0 |ssl3_accept_#t~mem83|)} assume 0 != #t~mem83;havoc #t~mem82.base, #t~mem82.offset;havoc #t~mem83; {71995#false} is VALID [2018-11-23 12:49:19,459 INFO L273 TraceCheckUtils]: 98: Hoare triple {71995#false} assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647;~ret~0 := #t~nondet92;havoc #t~nondet92; {71995#false} is VALID [2018-11-23 12:49:19,459 INFO L273 TraceCheckUtils]: 99: Hoare triple {71995#false} assume 6 == ~blastFlag~0;~blastFlag~0 := 7; {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 100: Hoare triple {71995#false} assume !(~ret~0 <= 0); {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 101: Hoare triple {71995#false} call write~int(8544, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 102: Hoare triple {71995#false} call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 103: Hoare triple {71995#false} assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 104: Hoare triple {71995#false} ~skip~0 := 0; {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 105: Hoare triple {71995#false} assume !false; {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 106: Hoare triple {71995#false} call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 107: Hoare triple {71995#false} assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,460 INFO L273 TraceCheckUtils]: 108: Hoare triple {71995#false} assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 109: Hoare triple {71995#false} assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 110: Hoare triple {71995#false} assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 111: Hoare triple {71995#false} assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 112: Hoare triple {71995#false} assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 113: Hoare triple {71995#false} assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 114: Hoare triple {71995#false} assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 115: Hoare triple {71995#false} assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 116: Hoare triple {71995#false} assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,461 INFO L273 TraceCheckUtils]: 117: Hoare triple {71995#false} assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 118: Hoare triple {71995#false} assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 119: Hoare triple {71995#false} assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 120: Hoare triple {71995#false} assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 121: Hoare triple {71995#false} assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 122: Hoare triple {71995#false} assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 123: Hoare triple {71995#false} assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 124: Hoare triple {71995#false} assume 8544 == #t~mem41;havoc #t~mem41; {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 125: Hoare triple {71995#false} call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,462 INFO L273 TraceCheckUtils]: 126: Hoare triple {71995#false} assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,463 INFO L273 TraceCheckUtils]: 127: Hoare triple {71995#false} assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; {71995#false} is VALID [2018-11-23 12:49:19,463 INFO L273 TraceCheckUtils]: 128: Hoare triple {71995#false} call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); {71995#false} is VALID [2018-11-23 12:49:19,463 INFO L273 TraceCheckUtils]: 129: Hoare triple {71995#false} assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; {71995#false} is VALID [2018-11-23 12:49:19,463 INFO L273 TraceCheckUtils]: 130: Hoare triple {71995#false} call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; {71995#false} is VALID [2018-11-23 12:49:19,463 INFO L273 TraceCheckUtils]: 131: Hoare triple {71995#false} assume 7 == ~blastFlag~0; {71995#false} is VALID [2018-11-23 12:49:19,463 INFO L273 TraceCheckUtils]: 132: Hoare triple {71995#false} assume !false; {71995#false} is VALID [2018-11-23 12:49:19,486 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 68 proven. 0 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2018-11-23 12:49:19,486 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 12:49:19,486 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 12:49:19,486 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 133 [2018-11-23 12:49:19,486 INFO L84 Accepts]: Finished accepts. word is accepted. [2018-11-23 12:49:19,487 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2018-11-23 12:49:19,587 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 89 edges. 89 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:19,587 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 12:49:19,587 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 12:49:19,588 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 12:49:19,588 INFO L87 Difference]: Start difference. First operand 1075 states and 1613 transitions. Second operand 7 states. [2018-11-23 12:49:28,252 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:28,253 INFO L93 Difference]: Finished difference Result 3503 states and 5230 transitions. [2018-11-23 12:49:28,253 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-11-23 12:49:28,253 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 133 [2018-11-23 12:49:28,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 12:49:28,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-23 12:49:28,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 785 transitions. [2018-11-23 12:49:28,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2018-11-23 12:49:28,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 785 transitions. [2018-11-23 12:49:28,260 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 785 transitions. [2018-11-23 12:49:29,285 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 785 edges. 785 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2018-11-23 12:49:29,514 INFO L225 Difference]: With dead ends: 3503 [2018-11-23 12:49:29,514 INFO L226 Difference]: Without dead ends: 2453 [2018-11-23 12:49:29,516 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 7 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2018-11-23 12:49:29,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2453 states. [2018-11-23 12:49:33,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2453 to 1705. [2018-11-23 12:49:33,208 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2018-11-23 12:49:33,208 INFO L82 GeneralOperation]: Start isEquivalent. First operand 2453 states. Second operand 1705 states. [2018-11-23 12:49:33,208 INFO L74 IsIncluded]: Start isIncluded. First operand 2453 states. Second operand 1705 states. [2018-11-23 12:49:33,209 INFO L87 Difference]: Start difference. First operand 2453 states. Second operand 1705 states. [2018-11-23 12:49:33,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:33,426 INFO L93 Difference]: Finished difference Result 2453 states and 3642 transitions. [2018-11-23 12:49:33,426 INFO L276 IsEmpty]: Start isEmpty. Operand 2453 states and 3642 transitions. [2018-11-23 12:49:33,429 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:33,429 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:33,429 INFO L74 IsIncluded]: Start isIncluded. First operand 1705 states. Second operand 2453 states. [2018-11-23 12:49:33,429 INFO L87 Difference]: Start difference. First operand 1705 states. Second operand 2453 states. [2018-11-23 12:49:33,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 12:49:33,648 INFO L93 Difference]: Finished difference Result 2453 states and 3642 transitions. [2018-11-23 12:49:33,648 INFO L276 IsEmpty]: Start isEmpty. Operand 2453 states and 3642 transitions. [2018-11-23 12:49:33,650 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-11-23 12:49:33,650 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2018-11-23 12:49:33,650 INFO L88 GeneralOperation]: Finished isEquivalent. [2018-11-23 12:49:33,650 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2018-11-23 12:49:33,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1705 states. [2018-11-23 12:49:33,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1705 states to 1705 states and 2556 transitions. [2018-11-23 12:49:33,754 INFO L78 Accepts]: Start accepts. Automaton has 1705 states and 2556 transitions. Word has length 133 [2018-11-23 12:49:33,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 12:49:33,754 INFO L480 AbstractCegarLoop]: Abstraction has 1705 states and 2556 transitions. [2018-11-23 12:49:33,755 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 12:49:33,755 INFO L276 IsEmpty]: Start isEmpty. Operand 1705 states and 2556 transitions. [2018-11-23 12:49:33,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 134 [2018-11-23 12:49:33,757 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 12:49:33,757 INFO L402 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 12:49:33,757 INFO L423 AbstractCegarLoop]: === Iteration 44 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 12:49:33,758 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 12:49:33,758 INFO L82 PathProgramCache]: Analyzing trace with hash -1236970977, now seen corresponding path program 1 times [2018-11-23 12:49:33,758 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 12:49:33,758 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 12:49:33,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:33,759 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 12:49:33,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 12:49:33,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:49:33,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 12:49:34,048 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24592, |#NULL.offset|=24609, |old(#NULL.base)|=24592, |old(#NULL.offset)|=24609, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24608, |old(~init~0)|=24620, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=24608, ~init~0=24620] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24592, |old(#NULL.offset)|=24609, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24608, |old(~init~0)|=24620, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24592, |old(#NULL.offset)|=24609, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24608, |old(~init~0)|=24620, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #633#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); VAL [main_~s~0.base=24590, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24590, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24616, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24621, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24579, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19.base|=2, |ssl3_accept_#t~mem19.offset|=(- 1), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22.base|=3, |ssl3_accept_#t~mem22.offset|=(- 2), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem32;havoc #t~mem32; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem35;havoc #t~mem35; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem71|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != #t~mem71);havoc #t~mem71;call write~int(8512, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8512, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8512 == #t~mem37;havoc #t~mem37; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4);call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem72.base|=24616, |ssl3_accept_#t~mem72.offset|=0, |ssl3_accept_#t~mem73.base|=24601, |ssl3_accept_#t~mem73.offset|=0, |ssl3_accept_#t~mem74|=24606, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296);havoc #t~mem72.base, #t~mem72.offset;havoc #t~mem74;havoc #t~mem73.base, #t~mem73.offset;assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647;~ret~0 := #t~nondet75;havoc #t~nondet75; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 6; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(8528, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8512, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8528, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8528 == #t~mem39;havoc #t~mem39; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4);call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4);~l~0 := #t~mem78;havoc #t~mem78;havoc #t~mem76.base, #t~mem76.offset;havoc #t~mem77.base, #t~mem77.offset;call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem79|=24610, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296;havoc #t~mem79;call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem80.base, 871 + #t~mem80.offset, 4);havoc #t~mem80.base, #t~mem80.offset; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem82.base|=24616, |ssl3_accept_#t~mem82.offset|=0, |ssl3_accept_#t~mem83|=1, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem83;havoc #t~mem82.base, #t~mem82.offset;havoc #t~mem83; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647;~ret~0 := #t~nondet92;havoc #t~nondet92; VAL [ssl3_accept_~blastFlag~0=6, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 6 == ~blastFlag~0;~blastFlag~0 := 7; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(8544, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24616, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24602, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8528, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8544, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8544 == #t~mem41;havoc #t~mem41; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem93|=24580, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != ~bitwiseAnd(#t~mem93, 1);havoc #t~mem93;call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem94.base|=24579, |ssl3_accept_#t~mem94.offset|=0, |ssl3_accept_#t~mem95.base|=0, |ssl3_accept_#t~mem95.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296);havoc #t~mem94.base, #t~mem94.offset;havoc #t~mem95.base, #t~mem95.offset; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4);call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem100|=24606, |ssl3_accept_#t~mem98.base|=24616, |ssl3_accept_#t~mem98.offset|=0, |ssl3_accept_#t~mem99.base|=24601, |ssl3_accept_#t~mem99.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296);havoc #t~mem99.base, #t~mem99.offset;havoc #t~mem98.base, #t~mem98.offset;havoc #t~mem100; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4);havoc #t~mem103.base, #t~mem103.offset;assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647;~ret~0 := #t~nondet104;havoc #t~nondet104; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 7 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=7, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~l~0=24606, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24590, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8544, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24590, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24592, #NULL.offset=24609, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24608, ~init~0=24620] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24590, #t~malloc3.offset=0, #t~malloc4.base=24616, #t~malloc4.offset=0, #t~malloc5.base=24621, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24590, ~s~0.offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1079-L1728] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] havoc ~buf~0.base, ~buf~0.offset; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342-L1346] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347-L1351] assume !(~ret~0 <= 0); [L1352] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] assume !(0 != #t~mem71); [L1352] havoc #t~mem71; [L1355] call write~int(8512, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume 8512 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1361] call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4); [L1361] call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem72.base=24616, #t~mem72.offset=0, #t~mem73.base=24601, #t~mem73.offset=0, #t~mem74=24606, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296); [L1361] havoc #t~mem72.base, #t~mem72.offset; [L1361] havoc #t~mem74; [L1361] havoc #t~mem73.base, #t~mem73.offset; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365-L1369] assume 2 == ~blastFlag~0; [L1366] ~blastFlag~0 := 6; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370-L1374] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] call write~int(8528, ~s.base, 52 + ~s.offset, 4); [L1377] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume 8528 == #t~mem39; [L1184] havoc #t~mem39; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1381] call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4); [L1381] call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem78; [L1381] havoc #t~mem76.base, #t~mem76.offset; [L1381] havoc #t~mem77.base, #t~mem77.offset; [L1382] call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem79=24610, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] assume 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296; [L1382] havoc #t~mem79; [L1383] call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1383] call write~int(1, #t~mem80.base, 871 + #t~mem80.offset, 4); [L1383] havoc #t~mem80.base, #t~mem80.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1387] call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=24616, #t~mem82.offset=0, #t~mem83=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] assume 0 != #t~mem83; [L1387] havoc #t~mem82.base, #t~mem82.offset; [L1387] havoc #t~mem83; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406-L1410] assume 6 == ~blastFlag~0; [L1407] ~blastFlag~0 := 7; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411-L1415] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] call write~int(8544, ~s.base, 52 + ~s.offset, 4); [L1429] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187-L1668] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190-L1667] assume 8544 == #t~mem41; [L1190] havoc #t~mem41; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem93=24580, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] assume 0 != ~bitwiseAnd(#t~mem93, 1); [L1433] havoc #t~mem93; [L1434] call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1434] call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem94.base=24579, #t~mem94.offset=0, #t~mem95.base=0, #t~mem95.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434-L1470] assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296); [L1434] havoc #t~mem94.base, #t~mem94.offset; [L1434] havoc #t~mem95.base, #t~mem95.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1444] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4); [L1444] call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem100=24606, #t~mem98.base=24616, #t~mem98.offset=0, #t~mem99.base=24601, #t~mem99.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296); [L1444] havoc #t~mem99.base, #t~mem99.offset; [L1444] havoc #t~mem98.base, #t~mem98.offset; [L1444] havoc #t~mem100; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1454] call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4); [L1454] havoc #t~mem103.base, #t~mem103.offset; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456-L1460] assume 7 == ~blastFlag~0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24592, #NULL.offset=24609, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24608, ~init~0=24620] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24592, old(#NULL.offset)=24609, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24590, #t~malloc3.offset=0, #t~malloc4.base=24616, #t~malloc4.offset=0, #t~malloc5.base=24621, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24590, ~s~0.offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1079-L1728] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1080] havoc ~buf~0.base, ~buf~0.offset; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0.base, ~cb~0.offset; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342-L1346] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347-L1351] assume !(~ret~0 <= 0); [L1352] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] assume !(0 != #t~mem71); [L1352] havoc #t~mem71; [L1355] call write~int(8512, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8512, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume 8512 == #t~mem37; [L1178] havoc #t~mem37; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] call #t~mem72.base, #t~mem72.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1361] call #t~mem73.base, #t~mem73.offset := read~$Pointer$(#t~mem72.base, 836 + #t~mem72.offset, 4); [L1361] call #t~mem74 := read~int(#t~mem73.base, 12 + #t~mem73.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem72.base=24616, #t~mem72.offset=0, #t~mem73.base=24601, #t~mem73.offset=0, #t~mem74=24606, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] assume !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296); [L1361] havoc #t~mem72.base, #t~mem72.offset; [L1361] havoc #t~mem74; [L1361] havoc #t~mem73.base, #t~mem73.offset; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365-L1369] assume 2 == ~blastFlag~0; [L1366] ~blastFlag~0 := 6; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370-L1374] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] call write~int(8528, ~s.base, 52 + ~s.offset, 4); [L1377] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8528, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume 8528 == #t~mem39; [L1184] havoc #t~mem39; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] call #t~mem76.base, #t~mem76.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1381] call #t~mem77.base, #t~mem77.offset := read~$Pointer$(#t~mem76.base, 836 + #t~mem76.offset, 4); [L1381] call #t~mem78 := read~int(#t~mem77.base, 12 + #t~mem77.offset, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem78; [L1381] havoc #t~mem76.base, #t~mem76.offset; [L1381] havoc #t~mem77.base, #t~mem77.offset; [L1382] call #t~mem79 := read~int(~s.base, 232 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem79=24610, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] assume 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296; [L1382] havoc #t~mem79; [L1383] call #t~mem80.base, #t~mem80.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1383] call write~int(1, #t~mem80.base, 871 + #t~mem80.offset, 4); [L1383] havoc #t~mem80.base, #t~mem80.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] call #t~mem82.base, #t~mem82.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1387] call #t~mem83 := read~int(#t~mem82.base, 871 + #t~mem82.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem82.base=24616, #t~mem82.offset=0, #t~mem83=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] assume 0 != #t~mem83; [L1387] havoc #t~mem82.base, #t~mem82.offset; [L1387] havoc #t~mem83; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=6, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406-L1410] assume 6 == ~blastFlag~0; [L1407] ~blastFlag~0 := 7; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411-L1415] assume !(~ret~0 <= 0); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] call write~int(8544, ~s.base, 52 + ~s.offset, 4); [L1429] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1685] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24616, #t~mem127.offset=0, #t~mem128=24602, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685-L1713] assume !(0 == #t~mem128); [L1685] havoc #t~mem128; [L1685] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] assume !false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139-L1684] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142-L1683] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145-L1682] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148-L1681] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151-L1680] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154-L1679] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157-L1678] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160-L1677] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163-L1676] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166-L1675] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169-L1674] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172-L1673] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175-L1672] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178-L1671] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181-L1670] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184-L1669] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187-L1668] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8544, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190-L1667] assume 8544 == #t~mem41; [L1190] havoc #t~mem41; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] call #t~mem93 := read~int(~s.base, 180 + ~s.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem93=24580, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] assume 0 != ~bitwiseAnd(#t~mem93, 1); [L1433] havoc #t~mem93; [L1434] call #t~mem94.base, #t~mem94.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1434] call #t~mem95.base, #t~mem95.offset := read~$Pointer$(#t~mem94.base, 148 + #t~mem94.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem94.base=24579, #t~mem94.offset=0, #t~mem95.base=0, #t~mem95.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434-L1470] assume !(0 != (#t~mem95.base + #t~mem95.offset) % 4294967296); [L1434] havoc #t~mem94.base, #t~mem94.offset; [L1434] havoc #t~mem95.base, #t~mem95.offset; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] call #t~mem98.base, #t~mem98.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1444] call #t~mem99.base, #t~mem99.offset := read~$Pointer$(#t~mem98.base, 836 + #t~mem98.offset, 4); [L1444] call #t~mem100 := read~int(#t~mem99.base, 12 + #t~mem99.offset, 4); VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem100=24606, #t~mem98.base=24616, #t~mem98.offset=0, #t~mem99.base=24601, #t~mem99.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] assume !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296); [L1444] havoc #t~mem99.base, #t~mem99.offset; [L1444] havoc #t~mem98.base, #t~mem98.offset; [L1444] havoc #t~mem100; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] call #t~mem103.base, #t~mem103.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1454] call write~int(1, #t~mem103.base, 895 + #t~mem103.offset, 4); [L1454] havoc #t~mem103.base, #t~mem103.offset; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456-L1460] assume 7 == ~blastFlag~0; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s.base=24590, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=7, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s.base=24590, ~s.offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem74; [L1361] havoc #t~mem73; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem74; [L1361] havoc #t~mem73; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem74; [L1361] havoc #t~mem73; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] ----- [2018-11-23 12:49:34,322 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24608 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 12:49:34,323 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24592, #NULL!offset=24609, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24608, ~init~0=24620] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24592, old(#NULL!offset)=24609, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24608, old(~init~0)=24620, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24590, #t~malloc3!offset=0, #t~malloc4!base=24616, #t~malloc4!offset=0, #t~malloc5!base=24621, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24590, ~s~0!offset=0] [L1074] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1079-L1728] ~s := #in~s; [L1080] havoc ~buf~0; [L1081] havoc ~l~0; [L1082] havoc ~Time~0; [L1083] havoc ~tmp~3; [L1084] havoc ~cb~0; [L1085] havoc ~num1~0; [L1086] havoc ~ret~0; [L1087] havoc ~new_state~0; [L1088] havoc ~state~0; [L1089] havoc ~skip~0; [L1090] havoc ~got_new_session~0; [L1091] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1091] ~tmp___1~0 := #t~nondet8; [L1091] havoc #t~nondet8; [L1092] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1092] ~tmp___2~0 := #t~nondet9; [L1092] havoc #t~nondet9; [L1093] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1093] ~tmp___3~0 := #t~nondet10; [L1093] havoc #t~nondet10; [L1094] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1094] ~tmp___4~0 := #t~nondet11; [L1094] havoc #t~nondet11; [L1095] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1095] ~tmp___5~0 := #t~nondet12; [L1095] havoc #t~nondet12; [L1096] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1096] ~tmp___6~0 := #t~nondet13; [L1096] havoc #t~nondet13; [L1097] havoc ~tmp___7~0; [L1098] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1098] ~tmp___8~0 := #t~nondet14; [L1098] havoc #t~nondet14; [L1099] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1099] ~tmp___9~0 := #t~nondet15; [L1099] havoc #t~nondet15; [L1100] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1100] ~tmp___10~0 := #t~nondet16; [L1100] havoc #t~nondet16; [L1101] havoc ~blastFlag~0; [L1105] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1347] COND FALSE !(~ret~0 <= 0) [L1352] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1352-L1356] COND FALSE !(0 != #t~mem71) [L1352] havoc #t~mem71; [L1355] FCALL call write~int(8512, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1357] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8512, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND TRUE 8512 == #t~mem37 [L1178] havoc #t~mem37; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361] FCALL call #t~mem72 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1361] FCALL call #t~mem73 := read~$Pointer$({ base: #t~mem72!base, offset: 836 + #t~mem72!offset }, 4); [L1361] FCALL call #t~mem74 := read~int({ base: #t~mem73!base, offset: 12 + #t~mem73!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem72!base=24616, #t~mem72!offset=0, #t~mem73!base=24601, #t~mem73!offset=0, #t~mem74=24606, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1361-L1375] COND FALSE !(0 != ~bitwiseAnd(#t~mem74, 256) % 4294967296) [L1361] havoc #t~mem72; [L1361] havoc #t~mem74; [L1361] havoc #t~mem73; [L1364] assume -2147483648 <= #t~nondet75 && #t~nondet75 <= 2147483647; [L1364] ~ret~0 := #t~nondet75; [L1364] havoc #t~nondet75; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1365] COND TRUE 2 == ~blastFlag~0 [L1366] ~blastFlag~0 := 6; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1370] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1376] FCALL call write~int(8528, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1377] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8512, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8528, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND TRUE 8528 == #t~mem39 [L1184] havoc #t~mem39; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1381] FCALL call #t~mem76 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1381] FCALL call #t~mem77 := read~$Pointer$({ base: #t~mem76!base, offset: 836 + #t~mem76!offset }, 4); [L1381] FCALL call #t~mem78 := read~int({ base: #t~mem77!base, offset: 12 + #t~mem77!offset }, 4); [L1381] ~l~0 := #t~mem78; [L1381] havoc #t~mem78; [L1381] havoc #t~mem76; [L1381] havoc #t~mem77; [L1382] FCALL call #t~mem79 := read~int({ base: ~s!base, offset: 232 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem79=24610, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1382-L1386] COND TRUE 0 != ~bitwiseAnd(#t~mem79, 2097152) % 4294967296 [L1382] havoc #t~mem79; [L1383] FCALL call #t~mem80 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1383] FCALL call write~int(1, { base: #t~mem80!base, offset: 871 + #t~mem80!offset }, 4); [L1383] havoc #t~mem80; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387] FCALL call #t~mem82 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1387] FCALL call #t~mem83 := read~int({ base: #t~mem82!base, offset: 871 + #t~mem82!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem82!base=24616, #t~mem82!offset=0, #t~mem83=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1387-L1427] COND TRUE 0 != #t~mem83 [L1387] havoc #t~mem82; [L1387] havoc #t~mem83; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=1, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1405] assume -2147483648 <= #t~nondet92 && #t~nondet92 <= 2147483647; [L1405] ~ret~0 := #t~nondet92; [L1405] havoc #t~nondet92; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=6, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1406] COND TRUE 6 == ~blastFlag~0 [L1407] ~blastFlag~0 := 7; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1411] COND FALSE !(~ret~0 <= 0) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1428] FCALL call write~int(8544, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1429] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1685] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24616, #t~mem127!offset=0, #t~mem128=24602, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1685] COND FALSE !(0 == #t~mem128) [L1685] havoc #t~mem128; [L1685] havoc #t~mem127; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1714] ~skip~0 := 0; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1136-L1715] COND FALSE !(false) VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8528, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8544, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1190] COND TRUE 8544 == #t~mem41 [L1190] havoc #t~mem41; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433] FCALL call #t~mem93 := read~int({ base: ~s!base, offset: 180 + ~s!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem93=24580, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1433-L1475] COND TRUE 0 != ~bitwiseAnd(#t~mem93, 1) [L1433] havoc #t~mem93; [L1434] FCALL call #t~mem94 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1434] FCALL call #t~mem95 := read~$Pointer$({ base: #t~mem94!base, offset: 148 + #t~mem94!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem94!base=24579, #t~mem94!offset=0, #t~mem95!base=0, #t~mem95!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1434] COND FALSE !(0 != (#t~mem95!base + #t~mem95!offset) % 4294967296) [L1434] havoc #t~mem94; [L1434] havoc #t~mem95; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444] FCALL call #t~mem98 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1444] FCALL call #t~mem99 := read~$Pointer$({ base: #t~mem98!base, offset: 836 + #t~mem98!offset }, 4); [L1444] FCALL call #t~mem100 := read~int({ base: #t~mem99!base, offset: 12 + #t~mem99!offset }, 4); VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem100=24606, #t~mem98!base=24616, #t~mem98!offset=0, #t~mem99!base=24601, #t~mem99!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1444-L1469] COND FALSE !(0 != ~bitwiseAnd(#t~mem100, 256) % 4294967296) [L1444] havoc #t~mem99; [L1444] havoc #t~mem98; [L1444] havoc #t~mem100; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=7, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1454] FCALL call #t~mem103 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1454] FCALL call write~int(1, { base: #t~mem103!base, offset: 895 + #t~mem103!offset }, 4); [L1454] havoc #t~mem103; [L1455] assume -2147483648 <= #t~nondet104 && #t~nondet104 <= 2147483647; [L1455] ~ret~0 := #t~nondet104; [L1455] havoc #t~nondet104; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1456] COND TRUE 7 == ~blastFlag~0 VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1726] assert false; VAL [#in~s!base=24590, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=7, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~l~0=24606, ~ret~0=0, ~s!base=24590, ~s!offset=0, ~skip~0=0, ~state~0=8544, ~Time~0=0, ~tmp___10~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=0, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24620, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={24590:0}, malloc(sizeof(SSL_CTX))={24621:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24616:0}, s={24590:0}, SSLv3_server_data={24587:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={24590:0}, SSLv3_server_data={24587:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->hit=0, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->options=24610, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={2:-1}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->verify_mode=24580, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={2:-1}, (s->session)->peer={0:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->session={24579:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] ----- [2018-11-23 12:49:34,422 WARN L170 areAnnotationChecker]: ULTIMATE.initENTRY has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: mainENTRY has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: ssl3_acceptENTRY has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: ULTIMATE.initFINAL has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2018-11-23 12:49:34,423 WARN L170 areAnnotationChecker]: L1074 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1074 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1115 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: ULTIMATE.initEXIT has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1074-1 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1115-2 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: mainFINAL has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:49:34,424 WARN L170 areAnnotationChecker]: L1121 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: mainEXIT has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1122 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1121-1 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1130 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: ssl3_acceptFINAL has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1136-2 has no Hoare annotation [2018-11-23 12:49:34,425 WARN L170 areAnnotationChecker]: L1136-2 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1136-2 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: ssl3_acceptEXIT has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1716 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1137 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1720 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1720 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1139 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1720-2 has no Hoare annotation [2018-11-23 12:49:34,426 WARN L170 areAnnotationChecker]: L1140 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1142 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1249 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1145 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1254 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1148 has no Hoare annotation [2018-11-23 12:49:34,427 WARN L170 areAnnotationChecker]: L1254-2 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1151 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1259 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1154 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1265 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1158 has no Hoare annotation [2018-11-23 12:49:34,428 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1157 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1267 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1265-2 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1308 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1160 has no Hoare annotation [2018-11-23 12:49:34,429 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1273 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1290 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1647 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1161 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1163 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1291 has no Hoare annotation [2018-11-23 12:49:34,430 WARN L170 areAnnotationChecker]: L1685 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1685 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1170 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1166 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1686 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1686 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1685-1 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1325 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 12:49:34,431 WARN L170 areAnnotationChecker]: L1169 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1687 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1687 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1325-2 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1172 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1689 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1689 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1687-2 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1687-2 has no Hoare annotation [2018-11-23 12:49:34,432 WARN L170 areAnnotationChecker]: L1176 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1175 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1698 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1698 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1342 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1178 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1342-2 has no Hoare annotation [2018-11-23 12:49:34,433 WARN L170 areAnnotationChecker]: L1182 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1181 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1352 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1361 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1184 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1352-2 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1361-2 has no Hoare annotation [2018-11-23 12:49:34,434 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1365 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1188 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1187 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1365-2 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1365-2 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1382 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1190 has no Hoare annotation [2018-11-23 12:49:34,435 WARN L170 areAnnotationChecker]: L1382-2 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1194 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1193 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1387 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1433 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1433 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1196 has no Hoare annotation [2018-11-23 12:49:34,436 WARN L170 areAnnotationChecker]: L1404 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1390 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1390 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1434 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1200 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1199 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1406 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1406 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-23 12:49:34,437 WARN L170 areAnnotationChecker]: L1393 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1435 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1443 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1480 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1480 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1202 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1406-2 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1406-2 has no Hoare annotation [2018-11-23 12:49:34,438 WARN L170 areAnnotationChecker]: L1394 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1394 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1393-1 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1444 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1444 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1203 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1205 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1397 has no Hoare annotation [2018-11-23 12:49:34,439 WARN L170 areAnnotationChecker]: L1445 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1445 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1453 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1493 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1490-1 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1209 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1208 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1398 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1398 has no Hoare annotation [2018-11-23 12:49:34,440 WARN L170 areAnnotationChecker]: L1456 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1456 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1508 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1508 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1211 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1398-2 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1398-2 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1555 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1555 has no Hoare annotation [2018-11-23 12:49:34,441 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1461 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1513 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1513 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1215 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1214 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1517 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1517 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1529 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1529 has no Hoare annotation [2018-11-23 12:49:34,442 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1217 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1221 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1220 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1540 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1540 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1223 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1227 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 12:49:34,443 WARN L170 areAnnotationChecker]: L1226 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1551 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1229 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1557-2 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1557-2 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1554 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1233 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-23 12:49:34,444 WARN L170 areAnnotationChecker]: L1232 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1569 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1569 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1557 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1557 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1579 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1579 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1235 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1569-2 has no Hoare annotation [2018-11-23 12:49:34,445 WARN L170 areAnnotationChecker]: L1586 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1586 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1239 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1238 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1586-2 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1586-2 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1608 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1608 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1241 has no Hoare annotation [2018-11-23 12:49:34,446 WARN L170 areAnnotationChecker]: L1598 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1598 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1608-2 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1608-2 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1242 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1245 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1619 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1619 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1629 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1629 has no Hoare annotation [2018-11-23 12:49:34,447 WARN L170 areAnnotationChecker]: L1619-2 has no Hoare annotation [2018-11-23 12:49:34,448 WARN L170 areAnnotationChecker]: L1633 has no Hoare annotation [2018-11-23 12:49:34,448 WARN L170 areAnnotationChecker]: L1633 has no Hoare annotation [2018-11-23 12:49:34,448 WARN L170 areAnnotationChecker]: L1629-1 has no Hoare annotation [2018-11-23 12:49:34,448 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2018-11-23 12:49:34,455 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 12:49:34 BoogieIcfgContainer [2018-11-23 12:49:34,455 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 12:49:34,455 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 12:49:34,455 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 12:49:34,456 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 12:49:34,456 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:47:18" (3/4) ... [2018-11-23 12:49:34,466 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 12:49:34,466 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 12:49:34,467 INFO L168 Benchmark]: Toolchain (without parser) took 140963.46 ms. Allocated memory was 1.5 GB in the beginning and 3.0 GB in the end (delta: 1.4 GB). Free memory was 1.4 GB in the beginning and 2.0 GB in the end (delta: -568.0 MB). Peak memory consumption was 861.8 MB. Max. memory is 7.1 GB. [2018-11-23 12:49:34,468 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:49:34,468 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1090.22 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 738.2 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -785.0 MB). Peak memory consumption was 51.9 MB. Max. memory is 7.1 GB. [2018-11-23 12:49:34,468 INFO L168 Benchmark]: Boogie Procedure Inliner took 82.90 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 7.1 GB. [2018-11-23 12:49:34,469 INFO L168 Benchmark]: Boogie Preprocessor took 149.05 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:49:34,469 INFO L168 Benchmark]: RCFGBuilder took 4114.18 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 158.5 MB). Peak memory consumption was 158.5 MB. Max. memory is 7.1 GB. [2018-11-23 12:49:34,470 INFO L168 Benchmark]: TraceAbstraction took 135507.85 ms. Allocated memory was 2.3 GB in the beginning and 3.0 GB in the end (delta: 691.5 MB). Free memory was 2.0 GB in the beginning and 2.0 GB in the end (delta: 45.1 MB). Peak memory consumption was 736.6 MB. Max. memory is 7.1 GB. [2018-11-23 12:49:34,473 INFO L168 Benchmark]: Witness Printer took 10.62 ms. Allocated memory is still 3.0 GB. Free memory is still 2.0 GB. There was no memory consumed. Max. memory is 7.1 GB. [2018-11-23 12:49:34,476 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1090.22 ms. Allocated memory was 1.5 GB in the beginning and 2.3 GB in the end (delta: 738.2 MB). Free memory was 1.4 GB in the beginning and 2.2 GB in the end (delta: -785.0 MB). Peak memory consumption was 51.9 MB. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 82.90 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.2 GB in the end (delta: 13.4 MB). Peak memory consumption was 13.4 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 149.05 ms. Allocated memory is still 2.3 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 4114.18 ms. Allocated memory is still 2.3 GB. Free memory was 2.2 GB in the beginning and 2.0 GB in the end (delta: 158.5 MB). Peak memory consumption was 158.5 MB. Max. memory is 7.1 GB. * TraceAbstraction took 135507.85 ms. Allocated memory was 2.3 GB in the beginning and 3.0 GB in the end (delta: 691.5 MB). Free memory was 2.0 GB in the beginning and 2.0 GB in the end (delta: 45.1 MB). Peak memory consumption was 736.6 MB. Max. memory is 7.1 GB. * Witness Printer took 10.62 ms. Allocated memory is still 3.0 GB. Free memory is still 2.0 GB. There was no memory consumed. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24608 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1726]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1444. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24620, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) VAL [init=1, malloc(sizeof(SSL))={24590:0}, malloc(sizeof(SSL_CTX))={24621:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24616:0}, s={24590:0}, SSLv3_server_data={24587:0}] [L1074] CALL ssl3_accept(s) VAL [init=1, s={24590:0}, SSLv3_server_data={24587:0}] [L1080] BUF_MEM *buf ; [L1081] unsigned long l ; [L1082] unsigned long Time ; [L1083] unsigned long tmp ; [L1084] void (*cb)() ; [L1085] long num1 ; [L1086] int ret ; [L1087] int new_state ; [L1088] int state ; [L1089] int skip ; [L1090] int got_new_session ; [L1091] int tmp___1 = __VERIFIER_nondet_int() ; [L1092] int tmp___2 = __VERIFIER_nondet_int() ; [L1093] int tmp___3 = __VERIFIER_nondet_int() ; [L1094] int tmp___4 = __VERIFIER_nondet_int() ; [L1095] int tmp___5 = __VERIFIER_nondet_int() ; [L1096] int tmp___6 = __VERIFIER_nondet_int() ; [L1097] int tmp___7 ; [L1098] long tmp___8 = __VERIFIER_nondet_long() ; [L1099] int tmp___9 = __VERIFIER_nondet_int() ; [L1100] int tmp___10 = __VERIFIER_nondet_int() ; [L1101] int blastFlag ; [L1105] s->state = 8464 [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24590:0}, s={24590:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1347] COND FALSE !(ret <= 0) [L1352] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->hit=0, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1352] COND FALSE !(s->hit) [L1355] s->state = 8512 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1357] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8512, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND TRUE s->state == 8512 [L1361] EXPR s->s3 [L1361] EXPR (s->s3)->tmp.new_cipher [L1361] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1361] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1364] ret = __VERIFIER_nondet_int() [L1365] COND TRUE blastFlag == 2 [L1366] blastFlag = 6 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1370] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1376] s->state = 8528 [L1377] s->init_num = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8512, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, ret=1, s={24590:0}, s={24590:0}, s->state=8528, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND TRUE s->state == 8528 [L1381] EXPR s->s3 [L1381] EXPR (s->s3)->tmp.new_cipher [L1381] EXPR ((s->s3)->tmp.new_cipher)->algorithms [L1381] l = ((s->s3)->tmp.new_cipher)->algorithms [L1382] EXPR s->options VAL [={2:-1}, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->options=24610, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1382] COND TRUE s->options & 2097152UL [L1383] EXPR s->s3 [L1383] (s->s3)->tmp.use_rsa_tmp = 1 [L1387] EXPR s->s3 [L1387] (s->s3)->tmp.use_rsa_tmp VAL [={2:-1}, (s->s3)->tmp.use_rsa_tmp=1, blastFlag=6, got_new_session=1, init=1, l=24606, ret=1, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1387] COND TRUE (s->s3)->tmp.use_rsa_tmp [L1405] ret = __VERIFIER_nondet_int() [L1406] COND TRUE blastFlag == 6 [L1407] blastFlag = 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1411] COND FALSE !(ret <= 0) VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1428] s->state = 8544 [L1429] s->init_num = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] EXPR s->s3 [L1685] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24602, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1685] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1714] skip = 0 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8528, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->state=8544, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1190] COND TRUE s->state == 8544 [L1433] EXPR s->verify_mode VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->verify_mode=24580, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1433] COND TRUE s->verify_mode & 1 [L1434] EXPR s->session [L1434] EXPR (s->session)->peer VAL [={2:-1}, (s->session)->peer={0:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->session={24579:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1434] COND FALSE !((unsigned long )(s->session)->peer != (unsigned long )((void *)0)) [L1444] EXPR s->s3 [L1444] EXPR (s->s3)->tmp.new_cipher [L1444] EXPR ((s->s3)->tmp.new_cipher)->algorithms VAL [={2:-1}, ((s->s3)->tmp.new_cipher)->algorithms=24606, (s->s3)->tmp.new_cipher={24601:0}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=7, s={24590:0}, s={24590:0}, s->s3={24616:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1444] COND FALSE !(((s->s3)->tmp.new_cipher)->algorithms & 256UL) [L1454] EXPR s->s3 [L1454] (s->s3)->tmp.cert_request = 1 [L1455] ret = __VERIFIER_nondet_int() [L1456] COND TRUE blastFlag == 7 VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] [L1726] __VERIFIER_error() VAL [={2:-1}, blastFlag=7, got_new_session=1, init=1, l=24606, ret=0, s={24590:0}, s={24590:0}, skip=0, SSLv3_server_data={24587:0}, state=8544, Time=0, tmp=0, tmp___1=0, tmp___10=0, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 159 locations, 1 error locations. UNSAFE Result, 135.4s OverallTime, 44 OverallIterations, 5 TraceHistogramMax, 97.2s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 9144 SDtfs, 2959 SDslu, 13377 SDs, 0 SdLazy, 8422 SolverSat, 454 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 14.4s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 292 GetRequests, 88 SyntacticMatches, 77 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 7.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1705occurred in iteration=43, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 15.2s AutomataMinimizationTime, 43 MinimizatonAttempts, 2276 StatesRemovedByMinimization, 42 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 16.0s InterpolantComputationTime, 3753 NumberOfCodeBlocks, 3753 NumberOfCodeBlocksAsserted, 44 NumberOfCheckSat, 3577 ConstructedInterpolants, 0 QuantifiedInterpolants, 1033875 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 43 InterpolantComputations, 43 PerfectInterpolantSequences, 2080/2080 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...