java -Xmx6000000000 -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data ./data --generate-csv --csv-dir ../../../releaseScripts/default/UAutomizer-linux/csv -tc ../../../trunk/examples/toolchains/AbstractInterpretationC.xml -s ../../../trunk/examples/settings/ai/eq-bench/svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf -i ../../../trunk/examples/svcomp/forester-heap/sll-sorted_true-unreach-call_true-valid-memsafety.i -------------------------------------------------------------------------------- This is Ultimate 0.1.23-6b94a2f [2018-01-24 16:34:46,042 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-01-24 16:34:46,044 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-01-24 16:34:46,058 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-01-24 16:34:46,059 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-01-24 16:34:46,059 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-01-24 16:34:46,061 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-01-24 16:34:46,062 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-01-24 16:34:46,064 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-01-24 16:34:46,065 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-01-24 16:34:46,066 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-01-24 16:34:46,066 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-01-24 16:34:46,067 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-01-24 16:34:46,068 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-01-24 16:34:46,069 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-01-24 16:34:46,072 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-01-24 16:34:46,074 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-01-24 16:34:46,076 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-01-24 16:34:46,077 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-01-24 16:34:46,078 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-01-24 16:34:46,081 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-01-24 16:34:46,081 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-01-24 16:34:46,081 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-01-24 16:34:46,082 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-01-24 16:34:46,083 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-01-24 16:34:46,084 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-01-24 16:34:46,084 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-01-24 16:34:46,085 INFO L177 SettingsManager]: PEA to Boogie provides no preferences, ignoring... [2018-01-24 16:34:46,085 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-01-24 16:34:46,085 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-01-24 16:34:46,086 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-01-24 16:34:46,086 INFO L98 SettingsManager]: Beginning loading settings from /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/ai/eq-bench/svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf [2018-01-24 16:34:46,095 INFO L110 SettingsManager]: Loading preferences was successful [2018-01-24 16:34:46,096 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-01-24 16:34:46,096 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-01-24 16:34:46,096 INFO L133 SettingsManager]: * to procedures, called more than once=true [2018-01-24 16:34:46,097 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2018-01-24 16:34:46,097 INFO L133 SettingsManager]: * Deactivate Weak Equivalences=true [2018-01-24 16:34:46,097 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=VPDomain [2018-01-24 16:34:46,097 INFO L133 SettingsManager]: * Use the RCFG-of-the-future interface=true [2018-01-24 16:34:46,097 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-01-24 16:34:46,097 INFO L133 SettingsManager]: * sizeof long=4 [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * Bitprecise bitfields=true [2018-01-24 16:34:46,098 INFO L133 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2018-01-24 16:34:46,099 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-01-24 16:34:46,099 INFO L133 SettingsManager]: * sizeof long double=12 [2018-01-24 16:34:46,099 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-01-24 16:34:46,099 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-01-24 16:34:46,099 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-01-24 16:34:46,099 INFO L133 SettingsManager]: * Add additional assume for each assert=false [2018-01-24 16:34:46,100 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-01-24 16:34:46,100 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-01-24 16:34:46,100 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-01-24 16:34:46,100 INFO L133 SettingsManager]: * Interpolant automaton=TWOTRACK [2018-01-24 16:34:46,100 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-01-24 16:34:46,100 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-01-24 16:34:46,101 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-01-24 16:34:46,101 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-01-24 16:34:46,101 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-01-24 16:34:46,101 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-01-24 16:34:46,102 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-01-24 16:34:46,102 INFO L133 SettingsManager]: * TransformationType=HEAP_SEPARATOR [2018-01-24 16:34:46,134 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-01-24 16:34:46,145 INFO L266 ainManager$Toolchain]: [Toolchain 1]: Parser(s) successfully initialized [2018-01-24 16:34:46,148 INFO L222 ainManager$Toolchain]: [Toolchain 1]: Toolchain data selected. [2018-01-24 16:34:46,149 INFO L271 PluginConnector]: Initializing CDTParser... [2018-01-24 16:34:46,149 INFO L276 PluginConnector]: CDTParser initialized [2018-01-24 16:34:46,150 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/sll-sorted_true-unreach-call_true-valid-memsafety.i [2018-01-24 16:34:46,310 INFO L304 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-01-24 16:34:46,314 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-01-24 16:34:46,315 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-01-24 16:34:46,315 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-01-24 16:34:46,320 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-01-24 16:34:46,320 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,323 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@28805b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46, skipping insertion in model container [2018-01-24 16:34:46,323 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,336 INFO L153 Dispatcher]: Using SV-COMP mode [2018-01-24 16:34:46,375 INFO L153 Dispatcher]: Using SV-COMP mode [2018-01-24 16:34:46,492 INFO L450 PostProcessor]: Settings: Checked method=main [2018-01-24 16:34:46,526 INFO L450 PostProcessor]: Settings: Checked method=main [2018-01-24 16:34:46,537 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46 WrapperNode [2018-01-24 16:34:46,537 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-01-24 16:34:46,538 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-01-24 16:34:46,538 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-01-24 16:34:46,539 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-01-24 16:34:46,553 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,554 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,565 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,565 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,574 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,581 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,583 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... [2018-01-24 16:34:46,586 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-01-24 16:34:46,587 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-01-24 16:34:46,587 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-01-24 16:34:46,587 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-01-24 16:34:46,589 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:46" (1/1) ... No working directory specified, using /storage/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-01-24 16:34:46,643 INFO L136 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-01-24 16:34:46,643 INFO L136 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-01-24 16:34:46,643 INFO L136 BoogieDeclarations]: Found implementation of procedure main [2018-01-24 16:34:46,644 INFO L128 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-01-24 16:34:46,644 INFO L128 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-01-24 16:34:46,644 INFO L128 BoogieDeclarations]: Found specification of procedure write~int [2018-01-24 16:34:46,644 INFO L128 BoogieDeclarations]: Found specification of procedure read~int [2018-01-24 16:34:46,644 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.free [2018-01-24 16:34:46,644 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-01-24 16:34:46,645 INFO L128 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-01-24 16:34:46,645 INFO L128 BoogieDeclarations]: Found specification of procedure malloc [2018-01-24 16:34:46,645 INFO L128 BoogieDeclarations]: Found specification of procedure free [2018-01-24 16:34:46,645 INFO L128 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2018-01-24 16:34:46,645 INFO L128 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2018-01-24 16:34:46,645 INFO L128 BoogieDeclarations]: Found specification of procedure main [2018-01-24 16:34:46,646 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-01-24 16:34:46,646 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-01-24 16:34:47,264 INFO L257 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-01-24 16:34:47,265 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.01 04:34:47 BoogieIcfgContainer [2018-01-24 16:34:47,265 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-01-24 16:34:47,266 INFO L113 PluginConnector]: ------------------------Abstract Interpretation---------------------------- [2018-01-24 16:34:47,266 INFO L271 PluginConnector]: Initializing Abstract Interpretation... [2018-01-24 16:34:47,267 INFO L276 PluginConnector]: Abstract Interpretation initialized [2018-01-24 16:34:47,268 INFO L185 PluginConnector]: Executing the observer AbstractInterpretationRcfgObserver from plugin Abstract Interpretation for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.01 04:34:47" (1/1) ... [2018-01-24 16:34:47,315 INFO L101 FixpointEngine]: Starting fixpoint engine with domain VPDomain (maxUnwinding=3, maxParallelStates=2) [2018-01-24 16:34:51,320 INFO L259 AbstractInterpreter]: Some error location(s) were reachable [2018-01-24 16:34:51,386 WARN L343 cessorBacktranslator]: Generated EnsuresSpecification ensures #valid == old(#valid); is not ensure(true) [2018-01-24 16:34:51,391 INFO L268 AbstractInterpreter]: Visited 207 different actions 1069 times. Merged at 142 different actions 558 times. Widened at 12 different actions 28 times. Found 60 fixpoints after 33 different actions. Largest state had 64 variables. [2018-01-24 16:34:51,393 INFO L132 PluginConnector]: ------------------------ END Abstract Interpretation---------------------------- [2018-01-24 16:34:51,394 INFO L168 Benchmark]: Toolchain (without parser) took 5082.97 ms. Allocated memory was 302.0 MB in the beginning and 633.9 MB in the end (delta: 331.9 MB). Free memory was 262.0 MB in the beginning and 217.5 MB in the end (delta: 44.5 MB). Peak memory consumption was 376.4 MB. Max. memory is 5.3 GB. [2018-01-24 16:34:51,394 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 302.0 MB. Free memory is still 268.0 MB. There was no memory consumed. Max. memory is 5.3 GB. [2018-01-24 16:34:51,395 INFO L168 Benchmark]: CACSL2BoogieTranslator took 222.96 ms. Allocated memory is still 302.0 MB. Free memory was 261.0 MB in the beginning and 248.8 MB in the end (delta: 12.2 MB). Peak memory consumption was 12.2 MB. Max. memory is 5.3 GB. [2018-01-24 16:34:51,395 INFO L168 Benchmark]: Boogie Preprocessor took 48.07 ms. Allocated memory is still 302.0 MB. Free memory was 248.8 MB in the beginning and 246.8 MB in the end (delta: 2.0 MB). Peak memory consumption was 2.0 MB. Max. memory is 5.3 GB. [2018-01-24 16:34:51,395 INFO L168 Benchmark]: RCFGBuilder took 678.27 ms. Allocated memory is still 302.0 MB. Free memory was 246.8 MB in the beginning and 205.5 MB in the end (delta: 41.3 MB). Peak memory consumption was 41.3 MB. Max. memory is 5.3 GB. [2018-01-24 16:34:51,395 INFO L168 Benchmark]: Abstract Interpretation took 4127.44 ms. Allocated memory was 302.0 MB in the beginning and 633.9 MB in the end (delta: 331.9 MB). Free memory was 205.5 MB in the beginning and 217.5 MB in the end (delta: -12.0 MB). Peak memory consumption was 319.9 MB. Max. memory is 5.3 GB. [2018-01-24 16:34:51,396 INFO L344 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 302.0 MB. Free memory is still 268.0 MB. There was no memory consumed. Max. memory is 5.3 GB. * CACSL2BoogieTranslator took 222.96 ms. Allocated memory is still 302.0 MB. Free memory was 261.0 MB in the beginning and 248.8 MB in the end (delta: 12.2 MB). Peak memory consumption was 12.2 MB. Max. memory is 5.3 GB. * Boogie Preprocessor took 48.07 ms. Allocated memory is still 302.0 MB. Free memory was 248.8 MB in the beginning and 246.8 MB in the end (delta: 2.0 MB). Peak memory consumption was 2.0 MB. Max. memory is 5.3 GB. * RCFGBuilder took 678.27 ms. Allocated memory is still 302.0 MB. Free memory was 246.8 MB in the beginning and 205.5 MB in the end (delta: 41.3 MB). Peak memory consumption was 41.3 MB. Max. memory is 5.3 GB. * Abstract Interpretation took 4127.44 ms. Allocated memory was 302.0 MB in the beginning and 633.9 MB in the end (delta: 331.9 MB). Free memory was 205.5 MB in the beginning and 217.5 MB in the end (delta: -12.0 MB). Peak memory consumption was 319.9 MB. Max. memory is 5.3 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2: - StatisticsResult: ArrayEqualityDomainStatistics #Locations : 146 LocStat_MAX_WEQGRAPH_SIZE : 0 LocStat_MAX_SIZEOF_WEQEDGELABEL : 0 LocStat_NO_SUPPORTING_EQUALITIES : 2093 LocStat_NO_SUPPORTING_DISEQUALITIES : 532 LocStat_NO_DISJUNCTIONS : -292 LocStat_MAX_NO_DISJUNCTIONS : -1 #Transitions : 211 TransStat_MAX_WEQGRAPH_SIZE : 0 TransStat_MAX_SIZEOF_WEQEDGELABEL : 0 TransStat_NO_SUPPORTING_EQUALITIES : 273 TransStat_NO_SUPPORTING_DISEQUALITIES : 69 TransStat_NO_DISJUNCTIONS : 231 TransStat_MAX_NO_DISJUNCTIONS : 4 - StatisticsResult: EqConstraintFactoryStatistics CONJOIN_DISJUNCTIVE(MILLISECONDS) : 0.439295 RENAME_VARIABLES(MILLISECONDS) : 0.022316 UNFREEZE(MILLISECONDS) : 0.000000 CONJOIN(MILLISECONDS) : 0.315793 PROJECTAWAY(MILLISECONDS) : 1.025601 ADD_WEAK_EQUALITY(MILLISECONDS) : 0.002178 DISJOIN(MILLISECONDS) : 0.272540 RENAME_VARIABLES_DISJUNCTIVE(MILLISECONDS) : 0.039428 ADD_EQUALITY(MILLISECONDS) : 0.015147 DISJOIN_DISJUNCTIVE(MILLISECONDS) : 0.000000 ADD_DISEQUALITY(MILLISECONDS) : 0.007743 #CONJOIN_DISJUNCTIVE : 1578 #RENAME_VARIABLES : 3133 #UNFREEZE : 0 #CONJOIN : 1889 #PROJECTAWAY : 1577 #ADD_WEAK_EQUALITY : 74 #DISJOIN : 303 #RENAME_VARIABLES_DISJUNCTIVE : 3029 #ADD_EQUALITY : 307 #DISJOIN_DISJUNCTIVE : 0 #ADD_DISEQUALITY : 59 - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] EXPR, FCALL x->next [L1016] FCALL x->next->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] EXPR, FCALL x->next [L1016] FCALL x->next->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] EXPR, FCALL x->next [L1016] EXPR, FCALL x->next->data [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND TRUE x->next != ((void*)0) && x->next->data == 0 [L1018] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] EXPR, FCALL x->next [L1016] EXPR, FCALL x->next->data [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND TRUE x->next != ((void*)0) && x->next->data == 0 [L1018] EXPR, FCALL x->data [L1018] COND FALSE !(!(x->data == 0)) [L1018] COND FALSE !(0) [L1019] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND FALSE !(x->next == ((void*)0)) [L1035] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND FALSE !(x->next == ((void*)0)) [L1035] EXPR, FCALL x->next [L1035] FCALL tmp->next = x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND FALSE !(x->next == ((void*)0)) [L1035] EXPR, FCALL x->next [L1035] FCALL tmp->next = x->next [L1036] FCALL x->next = tmp - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND TRUE x != ((void*)0) && x->data != 1 [L1043] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND TRUE x != ((void*)0) && x->data != 1 [L1043] EXPR, FCALL x->data [L1043] marked = x->data [L1044] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] EXPR, FCALL x->data [L1050] marked = x->data [L1051] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] EXPR, FCALL x->data [L1025] COND FALSE !(!(x->data == 1)) [L1025] COND FALSE !(0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND TRUE x != ((void*)0) && x->data != 1 [L1043] EXPR, FCALL x->data [L1043] marked = x->data [L1044] EXPR, FCALL x->data [L1044] COND FALSE !(!(x->data == 0)) [L1044] COND FALSE !(0) [L1045] COND FALSE !(!(marked == 0)) [L1045] COND FALSE !(0) [L1046] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] EXPR, FCALL x->data [L1050] marked = x->data [L1051] EXPR, FCALL x->data [L1051] COND FALSE !(!(x->data == 1)) [L1051] COND FALSE !(0) [L1052] COND FALSE !(!(marked == 1)) [L1052] COND FALSE !(0) [L1053] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] EXPR, FCALL x->data [L1025] COND FALSE !(!(x->data == 1)) [L1025] COND FALSE !(0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] EXPR, FCALL x->data [L1050] marked = x->data [L1051] EXPR, FCALL x->data [L1051] COND FALSE !(!(x->data == 1)) [L1051] COND FALSE !(0) [L1052] COND FALSE !(!(marked == 1)) [L1052] COND FALSE !(0) [L1053] EXPR, FCALL x->next [L1053] x = x->next [L1048] COND TRUE x != ((void*)0) [L1050] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND TRUE __VERIFIER_nondet_int() [L1002] marked = 1 [L1005] COND TRUE \read(marked) [L1006] FCALL x->data = 1 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] EXPR, FCALL x->next [L1016] EXPR, FCALL x->next->data [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND TRUE x->next != ((void*)0) && x->next->data == 0 [L1018] EXPR, FCALL x->data [L1018] COND FALSE !(!(x->data == 0)) [L1018] COND FALSE !(0) [L1019] EXPR, FCALL x->next [L1019] x = x->next [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] EXPR, FCALL x->next [L1016] EXPR, FCALL x->next->data [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND TRUE x->next != ((void*)0) && x->next->data == 0 [L1018] EXPR, FCALL x->data [L1018] COND FALSE !(!(x->data == 0)) [L1018] COND FALSE !(0) [L1019] EXPR, FCALL x->next [L1019] x = x->next [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND TRUE x != ((void*)0) && x->data != 1 [L1043] FCALL x->data - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] EXPR, FCALL x->data [L1025] COND FALSE !(!(x->data == 1)) [L1025] COND FALSE !(0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] EXPR, FCALL x->data [L1050] marked = x->data [L1051] EXPR, FCALL x->data [L1051] COND FALSE !(!(x->data == 1)) [L1051] COND FALSE !(0) [L1052] COND FALSE !(!(marked == 1)) [L1052] COND FALSE !(0) [L1053] EXPR, FCALL x->next [L1053] x = x->next [L1048] COND FALSE !(x != ((void*)0)) [L1055] x = head [L1057] COND TRUE x != ((void*)0) [L1059] head = x [L1060] FCALL x->next - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds Unable to prove that pointer dereference always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] EXPR, FCALL x->data [L1025] COND FALSE !(!(x->data == 1)) [L1025] COND FALSE !(0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND TRUE x != ((void*)0) && x->data != 1 [L1043] EXPR, FCALL x->data [L1043] marked = x->data [L1044] EXPR, FCALL x->data [L1044] COND FALSE !(!(x->data == 0)) [L1044] COND FALSE !(0) [L1045] COND FALSE !(!(marked == 0)) [L1045] COND FALSE !(0) [L1046] EXPR, FCALL x->next [L1046] x = x->next [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND FALSE !(x != ((void*)0)) [L1055] x = head [L1057] COND TRUE x != ((void*)0) [L1059] head = x [L1060] FCALL x->next - UnprovableResult [Line: 982]: Unable to prove that all allocated memory was freed Unable to prove that all allocated memory was freed Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] EXPR, FCALL x->data [L1025] COND FALSE !(!(x->data == 1)) [L1025] COND FALSE !(0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] EXPR, FCALL x->data [L1050] marked = x->data [L1051] EXPR, FCALL x->data [L1051] COND FALSE !(!(x->data == 1)) [L1051] COND FALSE !(0) [L1052] COND FALSE !(!(marked == 1)) [L1052] COND FALSE !(0) [L1053] EXPR, FCALL x->next [L1053] x = x->next [L1048] COND FALSE !(x != ((void*)0)) [L1055] x = head [L1057] COND TRUE x != ((void*)0) [L1059] head = x [L1060] EXPR, FCALL x->next [L1060] x = x->next [L1061] FCALL free(head) [L1057] COND FALSE !(x != ((void*)0)) [L1064] return 0; - UnprovableResult [Line: 1]: Unable to prove that free always succeeds Unable to prove that free always succeeds Reason: abstract domain could reach this error location. Possible FailurePath: [L985] EXPR, FCALL malloc(sizeof(SLL)) [L985] SLL* head = malloc(sizeof(SLL)); [L986] FCALL head->next = ((void*)0) [L987] FCALL head->data = 0 [L989] SLL* x = head; [L990] int marked = 0; [L993] COND TRUE __VERIFIER_nondet_int() || !marked [L996] EXPR, FCALL malloc(sizeof(SLL)) [L996] FCALL x->next = malloc(sizeof(SLL)) [L997] EXPR, FCALL x->next [L997] x = x->next [L998] FCALL x->next = ((void*)0) [L1000] COND FALSE !(__VERIFIER_nondet_int()) [L1005] COND FALSE !(\read(marked)) [L1008] FCALL x->data = 0 [L993] COND FALSE !(__VERIFIER_nondet_int() || !marked) [L1011] x = head [L1013] COND FALSE !(!(((void*)0) != x)) [L1013] COND FALSE !(0) [L1014] marked = 0 [L1016] EXPR, FCALL x->next [L1016] x->next != ((void*)0) && x->next->data == 0 [L1016] COND FALSE !(x->next != ((void*)0) && x->next->data == 0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND TRUE x->next != ((void*)0) && __VERIFIER_nondet_int() [L1024] EXPR, FCALL x->next [L1024] x = x->next [L1025] EXPR, FCALL x->data [L1025] COND FALSE !(!(x->data == 1)) [L1025] COND FALSE !(0) [L1022] EXPR, FCALL x->next [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] x->next != ((void*)0) && __VERIFIER_nondet_int() [L1022] COND FALSE !(x->next != ((void*)0) && __VERIFIER_nondet_int()) [L1028] EXPR, FCALL malloc(sizeof(SLL)) [L1028] SLL* tmp = malloc(sizeof(SLL)); [L1029] FCALL tmp->data = 1 [L1030] FCALL tmp->next = ((void*)0) [L1031] EXPR, FCALL x->next [L1031] COND TRUE x->next == ((void*)0) [L1032] FCALL x->next = tmp [L1039] marked = 0 [L1040] x = head [L1041] x != ((void*)0) && x->data != 1 [L1041] EXPR, FCALL x->data [L1041] x != ((void*)0) && x->data != 1 [L1041] COND FALSE !(x != ((void*)0) && x->data != 1) [L1048] COND TRUE x != ((void*)0) [L1050] EXPR, FCALL x->data [L1050] marked = x->data [L1051] EXPR, FCALL x->data [L1051] COND FALSE !(!(x->data == 1)) [L1051] COND FALSE !(0) [L1052] COND FALSE !(!(marked == 1)) [L1052] COND FALSE !(0) [L1053] EXPR, FCALL x->next [L1053] x = x->next [L1048] COND FALSE !(x != ((void*)0)) [L1055] x = head [L1057] COND TRUE x != ((void*)0) [L1059] head = x [L1060] EXPR, FCALL x->next [L1060] x = x->next [L1061] FCALL free(head) [L1057] COND TRUE x != ((void*)0) [L1059] head = x [L1060] EXPR, FCALL x->next [L1060] x = x->next [L1061] FCALL free(head) - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: free always succeeds For all program executions holds that free always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location - PositiveResult [Line: 1]: pointer dereference always succeeds For all program executions holds that pointer dereference always succeeds at this location * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification ensures #valid == old(#valid); is not ensure(true) RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/sll-sorted_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-Benchmark-0-2018-01-24_16-34-51-410.csv Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/sll-sorted_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-VPDomainBenchmark-0-2018-01-24_16-34-51-410.csv Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/sll-sorted_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-BenchmarkWithCounters-0-2018-01-24_16-34-51-410.csv Received shutdown request...