./Ultimate.py --spec /storage/repos/svcomp/c/properties/unreach-call.prp --file /storage/repos/svcomp/c/product-lines/email_spec4_product13_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2e94e6aa Calling Ultimate with: java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i /storage/repos/svcomp/c/product-lines/email_spec4_product13_true-unreach-call_true-termination.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 70d32ce76add0a705a911f06bde28b97180fa1ae ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-2e94e6a [2018-12-31 09:38:22,956 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-31 09:38:22,959 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-31 09:38:22,976 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-31 09:38:22,977 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-31 09:38:22,979 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-31 09:38:22,981 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-31 09:38:22,983 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-31 09:38:22,985 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-31 09:38:22,990 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-31 09:38:22,993 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-31 09:38:22,994 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-31 09:38:22,995 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-31 09:38:22,997 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-31 09:38:22,999 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-31 09:38:23,007 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-31 09:38:23,008 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-31 09:38:23,009 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-31 09:38:23,015 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-31 09:38:23,017 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-31 09:38:23,019 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-31 09:38:23,021 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-31 09:38:23,027 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-31 09:38:23,027 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-31 09:38:23,027 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-31 09:38:23,028 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-31 09:38:23,030 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-31 09:38:23,031 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-31 09:38:23,032 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-31 09:38:23,033 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-31 09:38:23,033 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-31 09:38:23,034 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-31 09:38:23,034 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-31 09:38:23,034 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-31 09:38:23,035 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-31 09:38:23,036 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-31 09:38:23,036 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-12-31 09:38:23,056 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-31 09:38:23,056 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-31 09:38:23,058 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-31 09:38:23,058 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-31 09:38:23,059 INFO L133 SettingsManager]: * Use SBE=true [2018-12-31 09:38:23,059 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-31 09:38:23,059 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-31 09:38:23,059 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-31 09:38:23,059 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-31 09:38:23,059 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-31 09:38:23,062 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-12-31 09:38:23,062 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-12-31 09:38:23,062 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-12-31 09:38:23,063 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-31 09:38:23,063 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-31 09:38:23,063 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-31 09:38:23,063 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-12-31 09:38:23,063 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-31 09:38:23,063 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-12-31 09:38:23,064 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-12-31 09:38:23,064 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-12-31 09:38:23,064 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-12-31 09:38:23,064 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-31 09:38:23,064 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-12-31 09:38:23,064 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-12-31 09:38:23,066 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-12-31 09:38:23,066 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-12-31 09:38:23,066 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-12-31 09:38:23,066 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 70d32ce76add0a705a911f06bde28b97180fa1ae [2018-12-31 09:38:23,129 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-31 09:38:23,149 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-31 09:38:23,153 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-31 09:38:23,155 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-31 09:38:23,155 INFO L276 PluginConnector]: CDTParser initialized [2018-12-31 09:38:23,156 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/svcomp/c/product-lines/email_spec4_product13_true-unreach-call_true-termination.cil.c [2018-12-31 09:38:23,222 INFO L221 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8207c5f27/052c6b037b7241b889a9549bb116588f/FLAG42acbf1bc [2018-12-31 09:38:23,799 INFO L307 CDTParser]: Found 1 translation units. [2018-12-31 09:38:23,799 INFO L161 CDTParser]: Scanning /storage/repos/svcomp/c/product-lines/email_spec4_product13_true-unreach-call_true-termination.cil.c [2018-12-31 09:38:23,830 INFO L355 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8207c5f27/052c6b037b7241b889a9549bb116588f/FLAG42acbf1bc [2018-12-31 09:38:24,001 INFO L363 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/8207c5f27/052c6b037b7241b889a9549bb116588f [2018-12-31 09:38:24,007 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-31 09:38:24,008 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-31 09:38:24,010 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-31 09:38:24,011 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-31 09:38:24,015 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-31 09:38:24,016 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.12 09:38:24" (1/1) ... [2018-12-31 09:38:24,019 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@75d0e1d4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:24, skipping insertion in model container [2018-12-31 09:38:24,020 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 31.12 09:38:24" (1/1) ... [2018-12-31 09:38:24,028 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-31 09:38:24,127 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-31 09:38:24,788 INFO L204 PostProcessor]: Analyzing one entry point: main [2018-12-31 09:38:24,822 INFO L191 MainTranslator]: Completed pre-run [2018-12-31 09:38:25,093 INFO L204 PostProcessor]: Analyzing one entry point: main [2018-12-31 09:38:25,171 INFO L195 MainTranslator]: Completed translation [2018-12-31 09:38:25,172 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25 WrapperNode [2018-12-31 09:38:25,172 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-31 09:38:25,173 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-31 09:38:25,173 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-31 09:38:25,173 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-31 09:38:25,183 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,222 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,311 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-31 09:38:25,312 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-31 09:38:25,312 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-31 09:38:25,312 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-31 09:38:25,323 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,323 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,334 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,334 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,377 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,416 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,427 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... [2018-12-31 09:38:25,444 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-31 09:38:25,445 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-31 09:38:25,445 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-31 09:38:25,445 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-31 09:38:25,446 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-12-31 09:38:25,518 INFO L130 BoogieDeclarations]: Found specification of procedure puts [2018-12-31 09:38:25,518 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2018-12-31 09:38:25,518 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-31 09:38:25,518 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-31 09:38:25,518 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-31 09:38:28,588 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-31 09:38:28,589 INFO L280 CfgBuilder]: Removed 235 assue(true) statements. [2018-12-31 09:38:28,590 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.12 09:38:28 BoogieIcfgContainer [2018-12-31 09:38:28,590 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-31 09:38:28,591 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-12-31 09:38:28,591 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-12-31 09:38:28,594 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-12-31 09:38:28,595 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 31.12 09:38:24" (1/3) ... [2018-12-31 09:38:28,595 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2cc0ccdb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 31.12 09:38:28, skipping insertion in model container [2018-12-31 09:38:28,596 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 31.12 09:38:25" (2/3) ... [2018-12-31 09:38:28,597 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2cc0ccdb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 31.12 09:38:28, skipping insertion in model container [2018-12-31 09:38:28,597 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.12 09:38:28" (3/3) ... [2018-12-31 09:38:28,599 INFO L112 eAbstractionObserver]: Analyzing ICFG email_spec4_product13_true-unreach-call_true-termination.cil.c [2018-12-31 09:38:28,609 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-12-31 09:38:28,618 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 2 error locations. [2018-12-31 09:38:28,636 INFO L257 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2018-12-31 09:38:28,685 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-12-31 09:38:28,686 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-12-31 09:38:28,686 INFO L383 AbstractCegarLoop]: Hoare is true [2018-12-31 09:38:28,686 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-12-31 09:38:28,686 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-12-31 09:38:28,687 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-12-31 09:38:28,687 INFO L387 AbstractCegarLoop]: Difference is false [2018-12-31 09:38:28,687 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-12-31 09:38:28,687 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-12-31 09:38:28,713 INFO L276 IsEmpty]: Start isEmpty. Operand 383 states. [2018-12-31 09:38:28,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2018-12-31 09:38:28,726 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:28,727 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:28,729 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:28,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:28,737 INFO L82 PathProgramCache]: Analyzing trace with hash -2045115247, now seen corresponding path program 1 times [2018-12-31 09:38:28,739 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:28,740 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:28,786 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:28,786 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:28,786 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:28,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:29,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:29,138 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:29,139 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-31 09:38:29,144 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-12-31 09:38:29,161 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-31 09:38:29,162 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:29,165 INFO L87 Difference]: Start difference. First operand 383 states. Second operand 3 states. [2018-12-31 09:38:29,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:29,406 INFO L93 Difference]: Finished difference Result 1114 states and 1961 transitions. [2018-12-31 09:38:29,408 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-31 09:38:29,409 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 40 [2018-12-31 09:38:29,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:29,433 INFO L225 Difference]: With dead ends: 1114 [2018-12-31 09:38:29,433 INFO L226 Difference]: Without dead ends: 668 [2018-12-31 09:38:29,439 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:29,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2018-12-31 09:38:29,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 343. [2018-12-31 09:38:29,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2018-12-31 09:38:29,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 598 transitions. [2018-12-31 09:38:29,542 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 598 transitions. Word has length 40 [2018-12-31 09:38:29,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:29,542 INFO L480 AbstractCegarLoop]: Abstraction has 343 states and 598 transitions. [2018-12-31 09:38:29,542 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-12-31 09:38:29,542 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 598 transitions. [2018-12-31 09:38:29,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2018-12-31 09:38:29,546 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:29,546 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:29,547 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:29,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:29,547 INFO L82 PathProgramCache]: Analyzing trace with hash 581557763, now seen corresponding path program 1 times [2018-12-31 09:38:29,547 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:29,547 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:29,548 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:29,548 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:29,549 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:29,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:29,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:29,828 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:29,828 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-31 09:38:29,830 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-12-31 09:38:29,830 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-31 09:38:29,831 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-31 09:38:29,831 INFO L87 Difference]: Start difference. First operand 343 states and 598 transitions. Second operand 5 states. [2018-12-31 09:38:30,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:30,421 INFO L93 Difference]: Finished difference Result 978 states and 1710 transitions. [2018-12-31 09:38:30,425 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-31 09:38:30,425 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 42 [2018-12-31 09:38:30,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:30,431 INFO L225 Difference]: With dead ends: 978 [2018-12-31 09:38:30,432 INFO L226 Difference]: Without dead ends: 654 [2018-12-31 09:38:30,434 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2018-12-31 09:38:30,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 654 states. [2018-12-31 09:38:30,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 654 to 343. [2018-12-31 09:38:30,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2018-12-31 09:38:30,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 597 transitions. [2018-12-31 09:38:30,466 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 597 transitions. Word has length 42 [2018-12-31 09:38:30,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:30,467 INFO L480 AbstractCegarLoop]: Abstraction has 343 states and 597 transitions. [2018-12-31 09:38:30,467 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-12-31 09:38:30,467 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 597 transitions. [2018-12-31 09:38:30,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2018-12-31 09:38:30,471 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:30,471 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:30,472 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:30,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:30,472 INFO L82 PathProgramCache]: Analyzing trace with hash -668907248, now seen corresponding path program 1 times [2018-12-31 09:38:30,472 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:30,472 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:30,474 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:30,475 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:30,475 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:30,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:30,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:30,638 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:30,639 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-31 09:38:30,639 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-12-31 09:38:30,639 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-31 09:38:30,639 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:30,640 INFO L87 Difference]: Start difference. First operand 343 states and 597 transitions. Second operand 3 states. [2018-12-31 09:38:30,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:30,760 INFO L93 Difference]: Finished difference Result 668 states and 1168 transitions. [2018-12-31 09:38:30,761 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-31 09:38:30,761 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 43 [2018-12-31 09:38:30,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:30,764 INFO L225 Difference]: With dead ends: 668 [2018-12-31 09:38:30,765 INFO L226 Difference]: Without dead ends: 348 [2018-12-31 09:38:30,766 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:30,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2018-12-31 09:38:30,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 343. [2018-12-31 09:38:30,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2018-12-31 09:38:30,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 596 transitions. [2018-12-31 09:38:30,849 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 596 transitions. Word has length 43 [2018-12-31 09:38:30,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:30,850 INFO L480 AbstractCegarLoop]: Abstraction has 343 states and 596 transitions. [2018-12-31 09:38:30,850 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-12-31 09:38:30,850 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 596 transitions. [2018-12-31 09:38:30,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2018-12-31 09:38:30,854 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:30,855 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:30,855 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:30,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:30,855 INFO L82 PathProgramCache]: Analyzing trace with hash 836086358, now seen corresponding path program 1 times [2018-12-31 09:38:30,856 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:30,856 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:30,857 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:30,859 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:30,860 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:30,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:30,993 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:30,993 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:30,993 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-31 09:38:30,994 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-12-31 09:38:30,994 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-31 09:38:30,994 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:30,994 INFO L87 Difference]: Start difference. First operand 343 states and 596 transitions. Second operand 3 states. [2018-12-31 09:38:31,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:31,211 INFO L93 Difference]: Finished difference Result 678 states and 1181 transitions. [2018-12-31 09:38:31,212 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-31 09:38:31,212 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 44 [2018-12-31 09:38:31,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:31,215 INFO L225 Difference]: With dead ends: 678 [2018-12-31 09:38:31,216 INFO L226 Difference]: Without dead ends: 343 [2018-12-31 09:38:31,217 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:31,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2018-12-31 09:38:31,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2018-12-31 09:38:31,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2018-12-31 09:38:31,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 594 transitions. [2018-12-31 09:38:31,236 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 594 transitions. Word has length 44 [2018-12-31 09:38:31,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:31,237 INFO L480 AbstractCegarLoop]: Abstraction has 343 states and 594 transitions. [2018-12-31 09:38:31,237 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-12-31 09:38:31,237 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 594 transitions. [2018-12-31 09:38:31,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-12-31 09:38:31,239 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:31,239 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:31,239 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:31,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:31,239 INFO L82 PathProgramCache]: Analyzing trace with hash -1027434837, now seen corresponding path program 1 times [2018-12-31 09:38:31,240 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:31,240 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:31,240 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:31,242 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:31,242 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:31,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:31,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:31,451 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:31,451 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-31 09:38:31,452 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-12-31 09:38:31,452 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-31 09:38:31,452 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-31 09:38:31,452 INFO L87 Difference]: Start difference. First operand 343 states and 594 transitions. Second operand 5 states. [2018-12-31 09:38:31,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:31,898 INFO L93 Difference]: Finished difference Result 968 states and 1690 transitions. [2018-12-31 09:38:31,899 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-31 09:38:31,899 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 45 [2018-12-31 09:38:31,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:31,904 INFO L225 Difference]: With dead ends: 968 [2018-12-31 09:38:31,904 INFO L226 Difference]: Without dead ends: 652 [2018-12-31 09:38:31,905 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2018-12-31 09:38:31,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2018-12-31 09:38:31,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 343. [2018-12-31 09:38:31,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2018-12-31 09:38:31,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 593 transitions. [2018-12-31 09:38:31,930 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 593 transitions. Word has length 45 [2018-12-31 09:38:31,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:31,931 INFO L480 AbstractCegarLoop]: Abstraction has 343 states and 593 transitions. [2018-12-31 09:38:31,931 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-12-31 09:38:31,931 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 593 transitions. [2018-12-31 09:38:31,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2018-12-31 09:38:31,932 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:31,932 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:31,935 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:31,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:31,935 INFO L82 PathProgramCache]: Analyzing trace with hash -913470578, now seen corresponding path program 1 times [2018-12-31 09:38:31,935 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:31,935 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:31,936 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:31,937 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:31,937 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:31,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:32,259 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:32,259 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:32,259 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-31 09:38:32,261 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-12-31 09:38:32,261 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-31 09:38:32,261 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-31 09:38:32,261 INFO L87 Difference]: Start difference. First operand 343 states and 593 transitions. Second operand 5 states. [2018-12-31 09:38:32,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:32,798 INFO L93 Difference]: Finished difference Result 973 states and 1695 transitions. [2018-12-31 09:38:32,799 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-12-31 09:38:32,799 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 46 [2018-12-31 09:38:32,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:32,803 INFO L225 Difference]: With dead ends: 973 [2018-12-31 09:38:32,804 INFO L226 Difference]: Without dead ends: 657 [2018-12-31 09:38:32,805 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2018-12-31 09:38:32,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657 states. [2018-12-31 09:38:32,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657 to 343. [2018-12-31 09:38:32,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 343 states. [2018-12-31 09:38:32,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 592 transitions. [2018-12-31 09:38:32,834 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 592 transitions. Word has length 46 [2018-12-31 09:38:32,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:32,834 INFO L480 AbstractCegarLoop]: Abstraction has 343 states and 592 transitions. [2018-12-31 09:38:32,834 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-12-31 09:38:32,835 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 592 transitions. [2018-12-31 09:38:32,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2018-12-31 09:38:32,836 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:32,837 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:32,838 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:32,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:32,839 INFO L82 PathProgramCache]: Analyzing trace with hash -1520446810, now seen corresponding path program 1 times [2018-12-31 09:38:32,839 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:32,839 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:32,840 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:32,840 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:32,840 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:32,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:32,968 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:32,969 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:32,969 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-31 09:38:32,969 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-12-31 09:38:32,969 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-31 09:38:32,970 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:32,970 INFO L87 Difference]: Start difference. First operand 343 states and 592 transitions. Second operand 3 states. [2018-12-31 09:38:33,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:33,058 INFO L93 Difference]: Finished difference Result 452 states and 767 transitions. [2018-12-31 09:38:33,058 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-31 09:38:33,058 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 47 [2018-12-31 09:38:33,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:33,067 INFO L225 Difference]: With dead ends: 452 [2018-12-31 09:38:33,067 INFO L226 Difference]: Without dead ends: 346 [2018-12-31 09:38:33,068 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:33,068 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2018-12-31 09:38:33,093 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 345. [2018-12-31 09:38:33,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 345 states. [2018-12-31 09:38:33,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 345 states to 345 states and 594 transitions. [2018-12-31 09:38:33,096 INFO L78 Accepts]: Start accepts. Automaton has 345 states and 594 transitions. Word has length 47 [2018-12-31 09:38:33,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:33,096 INFO L480 AbstractCegarLoop]: Abstraction has 345 states and 594 transitions. [2018-12-31 09:38:33,096 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-12-31 09:38:33,096 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 594 transitions. [2018-12-31 09:38:33,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2018-12-31 09:38:33,098 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:33,098 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:33,099 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:33,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:33,099 INFO L82 PathProgramCache]: Analyzing trace with hash -748805212, now seen corresponding path program 1 times [2018-12-31 09:38:33,099 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:33,099 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:33,101 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:33,102 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:33,102 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:33,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:33,202 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-31 09:38:33,202 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:33,202 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-31 09:38:33,203 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-12-31 09:38:33,203 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-31 09:38:33,203 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:33,203 INFO L87 Difference]: Start difference. First operand 345 states and 594 transitions. Second operand 3 states. [2018-12-31 09:38:33,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:33,308 INFO L93 Difference]: Finished difference Result 921 states and 1606 transitions. [2018-12-31 09:38:33,308 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-31 09:38:33,309 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 53 [2018-12-31 09:38:33,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:33,313 INFO L225 Difference]: With dead ends: 921 [2018-12-31 09:38:33,314 INFO L226 Difference]: Without dead ends: 607 [2018-12-31 09:38:33,315 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-31 09:38:33,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 607 states. [2018-12-31 09:38:33,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 607 to 501. [2018-12-31 09:38:33,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 501 states. [2018-12-31 09:38:33,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 501 states to 501 states and 880 transitions. [2018-12-31 09:38:33,356 INFO L78 Accepts]: Start accepts. Automaton has 501 states and 880 transitions. Word has length 53 [2018-12-31 09:38:33,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:33,356 INFO L480 AbstractCegarLoop]: Abstraction has 501 states and 880 transitions. [2018-12-31 09:38:33,357 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-12-31 09:38:33,357 INFO L276 IsEmpty]: Start isEmpty. Operand 501 states and 880 transitions. [2018-12-31 09:38:33,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2018-12-31 09:38:33,360 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:33,360 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:33,360 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:33,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:33,361 INFO L82 PathProgramCache]: Analyzing trace with hash 203078211, now seen corresponding path program 1 times [2018-12-31 09:38:33,361 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:33,361 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:33,362 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:33,362 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:33,362 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:33,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:33,518 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-31 09:38:33,518 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:33,518 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-31 09:38:33,518 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-12-31 09:38:33,519 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-31 09:38:33,519 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-31 09:38:33,519 INFO L87 Difference]: Start difference. First operand 501 states and 880 transitions. Second operand 5 states. [2018-12-31 09:38:34,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:34,514 INFO L93 Difference]: Finished difference Result 1004 states and 1699 transitions. [2018-12-31 09:38:34,515 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-31 09:38:34,515 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2018-12-31 09:38:34,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:34,521 INFO L225 Difference]: With dead ends: 1004 [2018-12-31 09:38:34,521 INFO L226 Difference]: Without dead ends: 924 [2018-12-31 09:38:34,522 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2018-12-31 09:38:34,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 924 states. [2018-12-31 09:38:34,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 924 to 584. [2018-12-31 09:38:34,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 584 states. [2018-12-31 09:38:34,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 1014 transitions. [2018-12-31 09:38:34,581 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 1014 transitions. Word has length 54 [2018-12-31 09:38:34,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:34,581 INFO L480 AbstractCegarLoop]: Abstraction has 584 states and 1014 transitions. [2018-12-31 09:38:34,581 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-12-31 09:38:34,582 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 1014 transitions. [2018-12-31 09:38:34,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-12-31 09:38:34,583 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:34,583 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:34,583 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:34,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:34,583 INFO L82 PathProgramCache]: Analyzing trace with hash 1846986458, now seen corresponding path program 1 times [2018-12-31 09:38:34,584 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:34,584 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:34,584 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:34,585 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:34,585 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:34,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:35,085 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-31 09:38:35,085 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:35,085 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-31 09:38:35,086 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-12-31 09:38:35,086 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-31 09:38:35,086 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-31 09:38:35,086 INFO L87 Difference]: Start difference. First operand 584 states and 1014 transitions. Second operand 7 states. [2018-12-31 09:38:35,685 WARN L181 SmtUtils]: Spent 116.00 ms on a formula simplification that was a NOOP. DAG size: 10 [2018-12-31 09:38:35,924 WARN L181 SmtUtils]: Spent 133.00 ms on a formula simplification that was a NOOP. DAG size: 12 [2018-12-31 09:38:36,210 WARN L181 SmtUtils]: Spent 119.00 ms on a formula simplification that was a NOOP. DAG size: 10 [2018-12-31 09:38:36,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:36,701 INFO L93 Difference]: Finished difference Result 832 states and 1413 transitions. [2018-12-31 09:38:36,702 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-12-31 09:38:36,702 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 55 [2018-12-31 09:38:36,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:36,707 INFO L225 Difference]: With dead ends: 832 [2018-12-31 09:38:36,707 INFO L226 Difference]: Without dead ends: 682 [2018-12-31 09:38:36,708 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2018-12-31 09:38:36,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 682 states. [2018-12-31 09:38:36,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 682 to 573. [2018-12-31 09:38:36,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2018-12-31 09:38:36,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 994 transitions. [2018-12-31 09:38:36,770 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 994 transitions. Word has length 55 [2018-12-31 09:38:36,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:36,770 INFO L480 AbstractCegarLoop]: Abstraction has 573 states and 994 transitions. [2018-12-31 09:38:36,770 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-12-31 09:38:36,771 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 994 transitions. [2018-12-31 09:38:36,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-12-31 09:38:36,772 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:36,772 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:36,772 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:36,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:36,773 INFO L82 PathProgramCache]: Analyzing trace with hash 930934001, now seen corresponding path program 1 times [2018-12-31 09:38:36,773 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:36,773 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:36,776 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:36,776 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:36,776 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:36,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:37,312 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-31 09:38:37,312 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:37,312 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-31 09:38:37,313 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-12-31 09:38:37,313 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-31 09:38:37,313 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-31 09:38:37,314 INFO L87 Difference]: Start difference. First operand 573 states and 994 transitions. Second operand 7 states. [2018-12-31 09:38:38,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:38,652 INFO L93 Difference]: Finished difference Result 1134 states and 1876 transitions. [2018-12-31 09:38:38,652 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-12-31 09:38:38,653 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 57 [2018-12-31 09:38:38,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:38,660 INFO L225 Difference]: With dead ends: 1134 [2018-12-31 09:38:38,660 INFO L226 Difference]: Without dead ends: 1100 [2018-12-31 09:38:38,661 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 37 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=80, Invalid=192, Unknown=0, NotChecked=0, Total=272 [2018-12-31 09:38:38,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1100 states. [2018-12-31 09:38:38,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1100 to 742. [2018-12-31 09:38:38,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 742 states. [2018-12-31 09:38:38,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 742 states to 742 states and 1264 transitions. [2018-12-31 09:38:38,739 INFO L78 Accepts]: Start accepts. Automaton has 742 states and 1264 transitions. Word has length 57 [2018-12-31 09:38:38,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:38,739 INFO L480 AbstractCegarLoop]: Abstraction has 742 states and 1264 transitions. [2018-12-31 09:38:38,739 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-12-31 09:38:38,739 INFO L276 IsEmpty]: Start isEmpty. Operand 742 states and 1264 transitions. [2018-12-31 09:38:38,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2018-12-31 09:38:38,742 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:38,742 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:38,742 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:38,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:38,742 INFO L82 PathProgramCache]: Analyzing trace with hash -1204239761, now seen corresponding path program 1 times [2018-12-31 09:38:38,742 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:38,743 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:38,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:38,744 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:38,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:38,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:38,941 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-31 09:38:38,941 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:38,942 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-12-31 09:38:38,942 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-12-31 09:38:38,942 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-12-31 09:38:38,942 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2018-12-31 09:38:38,942 INFO L87 Difference]: Start difference. First operand 742 states and 1264 transitions. Second operand 8 states. [2018-12-31 09:38:39,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:39,290 INFO L93 Difference]: Finished difference Result 962 states and 1609 transitions. [2018-12-31 09:38:39,291 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-31 09:38:39,291 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 58 [2018-12-31 09:38:39,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:39,297 INFO L225 Difference]: With dead ends: 962 [2018-12-31 09:38:39,297 INFO L226 Difference]: Without dead ends: 706 [2018-12-31 09:38:39,298 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=92, Invalid=180, Unknown=0, NotChecked=0, Total=272 [2018-12-31 09:38:39,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 706 states. [2018-12-31 09:38:39,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 706 to 659. [2018-12-31 09:38:39,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2018-12-31 09:38:39,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1126 transitions. [2018-12-31 09:38:39,364 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1126 transitions. Word has length 58 [2018-12-31 09:38:39,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:39,364 INFO L480 AbstractCegarLoop]: Abstraction has 659 states and 1126 transitions. [2018-12-31 09:38:39,364 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-12-31 09:38:39,364 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1126 transitions. [2018-12-31 09:38:39,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2018-12-31 09:38:39,367 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:39,367 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:39,368 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:39,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:39,368 INFO L82 PathProgramCache]: Analyzing trace with hash 1949742392, now seen corresponding path program 1 times [2018-12-31 09:38:39,368 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:39,368 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:39,371 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:39,371 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:39,371 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:39,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:39,562 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-31 09:38:39,562 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:39,563 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-31 09:38:39,563 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-12-31 09:38:39,563 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-31 09:38:39,563 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-31 09:38:39,563 INFO L87 Difference]: Start difference. First operand 659 states and 1126 transitions. Second operand 6 states. [2018-12-31 09:38:39,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:39,744 INFO L93 Difference]: Finished difference Result 766 states and 1284 transitions. [2018-12-31 09:38:39,745 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-12-31 09:38:39,746 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 77 [2018-12-31 09:38:39,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:39,750 INFO L225 Difference]: With dead ends: 766 [2018-12-31 09:38:39,750 INFO L226 Difference]: Without dead ends: 659 [2018-12-31 09:38:39,751 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2018-12-31 09:38:39,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 659 states. [2018-12-31 09:38:39,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 659 to 659. [2018-12-31 09:38:39,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 659 states. [2018-12-31 09:38:39,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 659 states to 659 states and 1123 transitions. [2018-12-31 09:38:39,822 INFO L78 Accepts]: Start accepts. Automaton has 659 states and 1123 transitions. Word has length 77 [2018-12-31 09:38:39,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:39,822 INFO L480 AbstractCegarLoop]: Abstraction has 659 states and 1123 transitions. [2018-12-31 09:38:39,822 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-12-31 09:38:39,823 INFO L276 IsEmpty]: Start isEmpty. Operand 659 states and 1123 transitions. [2018-12-31 09:38:39,825 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2018-12-31 09:38:39,825 INFO L394 BasicCegarLoop]: Found error trace [2018-12-31 09:38:39,826 INFO L402 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-31 09:38:39,826 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-12-31 09:38:39,826 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2018-12-31 09:38:39,826 INFO L82 PathProgramCache]: Analyzing trace with hash 140702341, now seen corresponding path program 1 times [2018-12-31 09:38:39,826 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-31 09:38:39,826 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-31 09:38:39,829 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:39,829 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-31 09:38:39,829 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-31 09:38:39,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-31 09:38:40,500 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-12-31 09:38:40,500 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-31 09:38:40,500 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-31 09:38:40,500 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-12-31 09:38:40,501 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-12-31 09:38:40,501 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2018-12-31 09:38:40,501 INFO L87 Difference]: Start difference. First operand 659 states and 1123 transitions. Second operand 8 states. [2018-12-31 09:38:40,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-31 09:38:40,799 INFO L93 Difference]: Finished difference Result 659 states and 1123 transitions. [2018-12-31 09:38:40,799 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-31 09:38:40,799 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 80 [2018-12-31 09:38:40,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-12-31 09:38:40,799 INFO L225 Difference]: With dead ends: 659 [2018-12-31 09:38:40,799 INFO L226 Difference]: Without dead ends: 0 [2018-12-31 09:38:40,803 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2018-12-31 09:38:40,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2018-12-31 09:38:40,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2018-12-31 09:38:40,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2018-12-31 09:38:40,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2018-12-31 09:38:40,804 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 80 [2018-12-31 09:38:40,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-12-31 09:38:40,804 INFO L480 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-31 09:38:40,806 INFO L481 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-12-31 09:38:40,807 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2018-12-31 09:38:40,807 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2018-12-31 09:38:40,812 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2018-12-31 09:38:40,922 WARN L181 SmtUtils]: Spent 106.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 105 [2018-12-31 09:38:41,605 WARN L181 SmtUtils]: Spent 106.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 105 [2018-12-31 09:38:42,960 WARN L181 SmtUtils]: Spent 982.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:43,103 WARN L181 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 46 DAG size of output: 31 [2018-12-31 09:38:43,403 WARN L181 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 24 [2018-12-31 09:38:43,670 WARN L181 SmtUtils]: Spent 178.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 24 [2018-12-31 09:38:44,119 WARN L181 SmtUtils]: Spent 448.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 70 [2018-12-31 09:38:44,288 WARN L181 SmtUtils]: Spent 167.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 50 [2018-12-31 09:38:44,518 WARN L181 SmtUtils]: Spent 227.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 51 [2018-12-31 09:38:45,074 WARN L181 SmtUtils]: Spent 461.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:45,889 WARN L181 SmtUtils]: Spent 640.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2018-12-31 09:38:46,262 WARN L181 SmtUtils]: Spent 371.00 ms on a formula simplification. DAG size of input: 91 DAG size of output: 62 [2018-12-31 09:38:46,755 WARN L181 SmtUtils]: Spent 134.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 42 [2018-12-31 09:38:47,204 WARN L181 SmtUtils]: Spent 202.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 47 [2018-12-31 09:38:47,563 WARN L181 SmtUtils]: Spent 238.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 51 [2018-12-31 09:38:47,829 WARN L181 SmtUtils]: Spent 151.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 24 [2018-12-31 09:38:48,690 WARN L181 SmtUtils]: Spent 860.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 24 [2018-12-31 09:38:49,146 WARN L181 SmtUtils]: Spent 454.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 24 [2018-12-31 09:38:49,526 WARN L181 SmtUtils]: Spent 377.00 ms on a formula simplification. DAG size of input: 94 DAG size of output: 65 [2018-12-31 09:38:50,131 WARN L181 SmtUtils]: Spent 420.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:50,452 WARN L181 SmtUtils]: Spent 118.00 ms on a formula simplification. DAG size of input: 44 DAG size of output: 29 [2018-12-31 09:38:51,194 WARN L181 SmtUtils]: Spent 504.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:51,913 WARN L181 SmtUtils]: Spent 248.00 ms on a formula simplification. DAG size of input: 34 DAG size of output: 24 [2018-12-31 09:38:52,170 WARN L181 SmtUtils]: Spent 255.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 57 [2018-12-31 09:38:52,582 WARN L181 SmtUtils]: Spent 410.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:53,120 WARN L181 SmtUtils]: Spent 395.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:53,525 WARN L181 SmtUtils]: Spent 403.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 67 [2018-12-31 09:38:53,800 INFO L444 ceAbstractionStarter]: At program point L498(lines 493 501) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= 0 ~__ste_email_isSigned0~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,800 INFO L448 ceAbstractionStarter]: For program point L1357(lines 1357 1363) no Hoare annotation was computed. [2018-12-31 09:38:53,800 INFO L448 ceAbstractionStarter]: For program point L2482(lines 2482 2490) no Hoare annotation was computed. [2018-12-31 09:38:53,800 INFO L448 ceAbstractionStarter]: For program point L1425(lines 1425 1431) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L2482-2(lines 2482 2490) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L1425-1(lines 1425 1431) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L1161(lines 1161 1167) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L1161-1(lines 1161 1167) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L1161-2(lines 1161 1167) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L1161-3(lines 1161 1167) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L448 ceAbstractionStarter]: For program point L1161-4(lines 1161 1167) no Hoare annotation was computed. [2018-12-31 09:38:53,801 INFO L444 ceAbstractionStarter]: At program point L2020(lines 2010 2066) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L2219(lines 2219 2227) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L444 ceAbstractionStarter]: At program point L1956(lines 1943 2071) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L2485(lines 2485 2489) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L2485-3(lines 2485 2489) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1296(lines 1296 1320) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1296-1(lines 1296 1320) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1296-2(lines 1296 1320) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1296-3(lines 1296 1320) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1296-4(lines 1296 1320) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1297(lines 1297 1305) no Hoare annotation was computed. [2018-12-31 09:38:53,802 INFO L448 ceAbstractionStarter]: For program point L1231(lines 1231 1277) no Hoare annotation was computed. [2018-12-31 09:38:53,803 INFO L448 ceAbstractionStarter]: For program point L1297-2(lines 1297 1305) no Hoare annotation was computed. [2018-12-31 09:38:53,805 INFO L448 ceAbstractionStarter]: For program point L2222(lines 2222 2226) no Hoare annotation was computed. [2018-12-31 09:38:53,805 INFO L448 ceAbstractionStarter]: For program point L1297-4(lines 1297 1305) no Hoare annotation was computed. [2018-12-31 09:38:53,806 INFO L444 ceAbstractionStarter]: At program point L2222-2(lines 2215 2230) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,806 INFO L448 ceAbstractionStarter]: For program point L1297-6(lines 1297 1305) no Hoare annotation was computed. [2018-12-31 09:38:53,806 INFO L448 ceAbstractionStarter]: For program point L1297-8(lines 1297 1305) no Hoare annotation was computed. [2018-12-31 09:38:53,806 INFO L451 ceAbstractionStarter]: At program point L2817-1(lines 2812 2820) the Hoare annotation is: true [2018-12-31 09:38:53,806 INFO L444 ceAbstractionStarter]: At program point L2817(lines 2812 2820) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse8 (= ULTIMATE.start_isSigned_~handle 1)) (.cse6 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse9 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse10 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse11 (= 1 ULTIMATE.start_outgoing_~client)) (.cse12 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse13 (= ULTIMATE.start_main_~tmp~7 1)) (.cse14 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse15 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse16 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse17 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (let ((.cse5 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse7 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse3 .cse4 .cse5 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse3 .cse4 .cse5 .cse6 .cse7 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0)) .cse8 .cse9 .cse10))) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17) (and .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse8 (and (= 0 ~__ste_email_isSigned0~0) .cse6) .cse9 .cse10) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17))) [2018-12-31 09:38:53,806 INFO L448 ceAbstractionStarter]: For program point L1232(lines 1232 1243) no Hoare annotation was computed. [2018-12-31 09:38:53,806 INFO L444 ceAbstractionStarter]: At program point L1166(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,807 INFO L444 ceAbstractionStarter]: At program point L1166-1(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,807 INFO L444 ceAbstractionStarter]: At program point L1166-2(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,807 INFO L444 ceAbstractionStarter]: At program point L1166-3(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,807 INFO L444 ceAbstractionStarter]: At program point L1166-4(lines 1149 1172) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,807 INFO L448 ceAbstractionStarter]: For program point L2025(lines 2025 2032) no Hoare annotation was computed. [2018-12-31 09:38:53,807 INFO L444 ceAbstractionStarter]: At program point L2555(lines 2594 2606) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,807 INFO L448 ceAbstractionStarter]: For program point L1366(lines 1366 1382) no Hoare annotation was computed. [2018-12-31 09:38:53,807 INFO L448 ceAbstractionStarter]: For program point L1300(lines 1300 1304) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1300-3(lines 1300 1304) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1300-6(lines 1300 1304) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1300-9(lines 1300 1304) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1961(lines 1961 1968) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1300-12(lines 1300 1304) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L2688(lines 2688 2692) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L444 ceAbstractionStarter]: At program point L2622(lines 2617 2625) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 |ULTIMATE.start_is_queue_empty_#res|))) (.cse9 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse10 (= 1 ULTIMATE.start_outgoing_~client)) (.cse11 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse12 (= ULTIMATE.start_main_~tmp~7 1)) (.cse13 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse14 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse15 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse16 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) (and .cse0 .cse1 .cse2 (let ((.cse17 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse18 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse19 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse17 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse18 .cse19) (and .cse17 .cse18 .cse19 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16))) [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L2688-1(lines 2688 2692) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1565(lines 1565 1577) no Hoare annotation was computed. [2018-12-31 09:38:53,808 INFO L448 ceAbstractionStarter]: For program point L1565-2(lines 1565 1577) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L1565-4(lines 1565 1577) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L1367(lines 1367 1378) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L1236(lines 1236 1242) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L444 ceAbstractionStarter]: At program point L1435(lines 1388 1441) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L2426(lines 2426 2437) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L451 ceAbstractionStarter]: At program point L1435-1(lines 1388 1441) the Hoare annotation is: true [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L2426-1(lines 2426 2437) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L1568(lines 1568 1576) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L1568-2(lines 1568 1576) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L1568-4(lines 1568 1576) no Hoare annotation was computed. [2018-12-31 09:38:53,809 INFO L448 ceAbstractionStarter]: For program point L2163-1(lines 2163 2174) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L1106(lines 1106 1122) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L2163(lines 2163 2174) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L1106-1(lines 1106 1122) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L1106-2(lines 1106 1122) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L1106-3(lines 1106 1122) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L1371(lines 1371 1377) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L444 ceAbstractionStarter]: At program point L1768(lines 1749 1770) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,810 INFO L448 ceAbstractionStarter]: For program point L1571(lines 1571 1575) no Hoare annotation was computed. [2018-12-31 09:38:53,810 INFO L444 ceAbstractionStarter]: At program point L1571-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 ~__ste_email_isSigned0~0) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,811 INFO L448 ceAbstractionStarter]: For program point L1571-3(lines 1571 1575) no Hoare annotation was computed. [2018-12-31 09:38:53,811 INFO L448 ceAbstractionStarter]: For program point L2430(lines 2430 2436) no Hoare annotation was computed. [2018-12-31 09:38:53,811 INFO L444 ceAbstractionStarter]: At program point L1571-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= ULTIMATE.start_setClientId_~handle 2) (= 0 ~__ste_email_isSigned0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,811 INFO L448 ceAbstractionStarter]: For program point L1571-6(lines 1571 1575) no Hoare annotation was computed. [2018-12-31 09:38:53,811 INFO L448 ceAbstractionStarter]: For program point L2430-1(lines 2430 2436) no Hoare annotation was computed. [2018-12-31 09:38:53,811 INFO L444 ceAbstractionStarter]: At program point L1571-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,811 INFO L448 ceAbstractionStarter]: For program point L1307(lines 1307 1319) no Hoare annotation was computed. [2018-12-31 09:38:53,811 INFO L444 ceAbstractionStarter]: At program point L1307-1(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,811 INFO L448 ceAbstractionStarter]: For program point L1307-2(lines 1307 1319) no Hoare annotation was computed. [2018-12-31 09:38:53,811 INFO L444 ceAbstractionStarter]: At program point L1307-3(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,812 INFO L448 ceAbstractionStarter]: For program point L1307-4(lines 1307 1319) no Hoare annotation was computed. [2018-12-31 09:38:53,812 INFO L444 ceAbstractionStarter]: At program point L1307-5(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,812 INFO L448 ceAbstractionStarter]: For program point L1307-6(lines 1307 1319) no Hoare annotation was computed. [2018-12-31 09:38:53,812 INFO L444 ceAbstractionStarter]: At program point L1307-7(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,812 INFO L448 ceAbstractionStarter]: For program point L1307-8(lines 1307 1319) no Hoare annotation was computed. [2018-12-31 09:38:53,812 INFO L444 ceAbstractionStarter]: At program point L2034(lines 2021 2065) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,812 INFO L444 ceAbstractionStarter]: At program point L1307-9(lines 1281 1324) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,812 INFO L448 ceAbstractionStarter]: For program point L1308(lines 1308 1316) no Hoare annotation was computed. [2018-12-31 09:38:53,812 INFO L448 ceAbstractionStarter]: For program point L1308-2(lines 1308 1316) no Hoare annotation was computed. [2018-12-31 09:38:53,812 INFO L448 ceAbstractionStarter]: For program point L1308-4(lines 1308 1316) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L2167-1(lines 2167 2173) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1308-6(lines 1308 1316) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1110(lines 1110 1121) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L2167(lines 2167 2173) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1110-1(lines 1110 1121) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1308-8(lines 1308 1316) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1110-2(lines 1110 1121) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1110-3(lines 1110 1121) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1177(lines 1177 1189) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1177-2(lines 1177 1189) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1177-4(lines 1177 1189) no Hoare annotation was computed. [2018-12-31 09:38:53,813 INFO L448 ceAbstractionStarter]: For program point L1177-6(lines 1177 1189) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L444 ceAbstractionStarter]: At program point L1970(lines 1957 2070) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1177-8(lines 1177 1189) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L444 ceAbstractionStarter]: At program point L2631(lines 2626 2634) the Hoare annotation is: false [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1311(lines 1311 1315) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1245(lines 1245 1276) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1311-3(lines 1311 1315) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1311-6(lines 1311 1315) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1311-9(lines 1311 1315) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L448 ceAbstractionStarter]: For program point L1311-12(lines 1311 1315) no Hoare annotation was computed. [2018-12-31 09:38:53,814 INFO L451 ceAbstractionStarter]: At program point L2435-1(lines 2422 2440) the Hoare annotation is: true [2018-12-31 09:38:53,815 INFO L444 ceAbstractionStarter]: At program point L2435(lines 2422 2440) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1246(lines 1246 1257) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1180(lines 1180 1188) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1180-2(lines 1180 1188) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1114(lines 1114 1120) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1114-1(lines 1114 1120) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1180-4(lines 1180 1188) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1114-2(lines 1114 1120) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L2039(lines 2039 2046) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1114-3(lines 1114 1120) no Hoare annotation was computed. [2018-12-31 09:38:53,815 INFO L448 ceAbstractionStarter]: For program point L1180-6(lines 1180 1188) no Hoare annotation was computed. [2018-12-31 09:38:53,816 INFO L448 ceAbstractionStarter]: For program point L1180-8(lines 1180 1188) no Hoare annotation was computed. [2018-12-31 09:38:53,816 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2018-12-31 09:38:53,816 INFO L444 ceAbstractionStarter]: At program point L2172(lines 2159 2177) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,816 INFO L451 ceAbstractionStarter]: At program point L2172-1(lines 2159 2177) the Hoare annotation is: true [2018-12-31 09:38:53,816 INFO L448 ceAbstractionStarter]: For program point L1446(lines 1446 1482) no Hoare annotation was computed. [2018-12-31 09:38:53,816 INFO L448 ceAbstractionStarter]: For program point L1446-1(lines 1446 1482) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1446-2(lines 1446 1482) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1446-3(lines 1446 1482) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1446-4(lines 1446 1482) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1975(lines 1975 1982) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1447(lines 1447 1455) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L444 ceAbstractionStarter]: At program point L1381(lines 1334 1387) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1447-2(lines 1447 1455) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1447-4(lines 1447 1455) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1447-6(lines 1447 1455) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1183(lines 1183 1187) no Hoare annotation was computed. [2018-12-31 09:38:53,817 INFO L448 ceAbstractionStarter]: For program point L1447-8(lines 1447 1455) no Hoare annotation was computed. [2018-12-31 09:38:53,818 INFO L444 ceAbstractionStarter]: At program point L1183-2(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,818 INFO L448 ceAbstractionStarter]: For program point L1183-3(lines 1183 1187) no Hoare annotation was computed. [2018-12-31 09:38:53,818 INFO L444 ceAbstractionStarter]: At program point L1183-5(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,818 INFO L448 ceAbstractionStarter]: For program point L1183-6(lines 1183 1187) no Hoare annotation was computed. [2018-12-31 09:38:53,818 INFO L444 ceAbstractionStarter]: At program point L1183-8(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,818 INFO L448 ceAbstractionStarter]: For program point L1183-9(lines 1183 1187) no Hoare annotation was computed. [2018-12-31 09:38:53,818 INFO L444 ceAbstractionStarter]: At program point L1183-11(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,818 INFO L448 ceAbstractionStarter]: For program point L1183-12(lines 1183 1187) no Hoare annotation was computed. [2018-12-31 09:38:53,818 INFO L444 ceAbstractionStarter]: At program point L1183-14(lines 1173 1192) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,819 INFO L448 ceAbstractionStarter]: For program point L1250(lines 1250 1256) no Hoare annotation was computed. [2018-12-31 09:38:53,820 INFO L448 ceAbstractionStarter]: For program point L1911(lines 1910 2074) no Hoare annotation was computed. [2018-12-31 09:38:53,820 INFO L444 ceAbstractionStarter]: At program point L1119(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= 1 |ULTIMATE.start_createEmail_#res|) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= ULTIMATE.start_setClientId_~handle 1)) (= 1 ULTIMATE.start_outgoing_~msg) (= 1 ULTIMATE.start_outgoing_~client) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ULTIMATE.start_main_~tmp~7 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,820 INFO L444 ceAbstractionStarter]: At program point L1119-1(lines 1102 1125) the Hoare annotation is: (and (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg) (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client) (= 1 ~bob~0) (not (= ~__ste_client_privateKey0~0 0)) (= 1 |ULTIMATE.start_createEmail_#res|) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= ULTIMATE.start_setClientId_~handle 1)) (= 1 ULTIMATE.start_outgoing_~msg) (= 1 ULTIMATE.start_outgoing_~client) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ULTIMATE.start_main_~tmp~7 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client) (= ULTIMATE.start_isSigned_~handle 1) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,820 INFO L444 ceAbstractionStarter]: At program point L1119-2(lines 1102 1125) the Hoare annotation is: false [2018-12-31 09:38:53,820 INFO L444 ceAbstractionStarter]: At program point L1119-3(lines 1102 1125) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (not (= ~__ste_client_privateKey0~0 0)) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= 1 |ULTIMATE.start_createEmail_#res|) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,820 INFO L448 ceAbstractionStarter]: For program point L1912(lines 1912 1916) no Hoare annotation was computed. [2018-12-31 09:38:53,820 INFO L448 ceAbstractionStarter]: For program point L1450(lines 1450 1454) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L448 ceAbstractionStarter]: For program point L1450-3(lines 1450 1454) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L448 ceAbstractionStarter]: For program point L1450-6(lines 1450 1454) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L448 ceAbstractionStarter]: For program point L1450-9(lines 1450 1454) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L448 ceAbstractionStarter]: For program point L63(lines 63 76) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L448 ceAbstractionStarter]: For program point L1450-12(lines 1450 1454) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L444 ceAbstractionStarter]: At program point L63-1(lines 54 79) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing_~client)) (.cse8 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse9 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse13 (= ULTIMATE.start_isSigned_~handle 1)) (.cse11 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse14 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse15 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse2 (= 1 ~bob~0)) (.cse3 (= ULTIMATE.start_main_~tmp~7 1)) (.cse4 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse6 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse7 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (let ((.cse10 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse12 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse8 .cse9 .cse10 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse8 .cse9 .cse10 .cse11 .cse12 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0)) .cse13 .cse14 .cse15))) .cse16) (and .cse0 (and .cse8 .cse9 .cse13 (and (= 0 ~__ste_email_isSigned0~0) .cse11) .cse14 .cse15) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse16))) [2018-12-31 09:38:53,821 INFO L448 ceAbstractionStarter]: For program point L63-2(lines 63 76) no Hoare annotation was computed. [2018-12-31 09:38:53,821 INFO L451 ceAbstractionStarter]: At program point L63-3(lines 54 79) the Hoare annotation is: true [2018-12-31 09:38:53,821 INFO L444 ceAbstractionStarter]: At program point L2640(lines 2635 2643) the Hoare annotation is: false [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L-1(line -1) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L444 ceAbstractionStarter]: At program point L2048(lines 2035 2064) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,822 INFO L444 ceAbstractionStarter]: At program point L2841(lines 2830 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (= 1 |ULTIMATE.start_createEmail_#res|) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L2445(lines 2445 2453) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L2445-2(lines 2445 2453) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L67(lines 67 73) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L67-2(lines 67 73) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L2182(lines 2182 2190) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L2182-2(lines 2182 2190) no Hoare annotation was computed. [2018-12-31 09:38:53,822 INFO L448 ceAbstractionStarter]: For program point L2182-4(lines 2182 2190) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L444 ceAbstractionStarter]: At program point L1984(lines 1971 2069) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1918(lines 1918 2073) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1457(lines 1457 1481) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L2448(lines 2448 2452) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1457-1(lines 1457 1481) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1457-2(lines 1457 1481) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L444 ceAbstractionStarter]: At program point L2448-2(lines 1 2844) the Hoare annotation is: (let ((.cse4 (= 1 ULTIMATE.start_outgoing_~client)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse1 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse8 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse10 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse0 (= 1 ~bob~0)) (.cse5 (= ULTIMATE.start_main_~tmp~7 1)) (.cse6 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse0 (not (= ~__ste_client_privateKey0~0 0)) .cse1 .cse2 .cse3 .cse4 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 (and .cse3 (= 0 ~__ste_email_isSigned0~0) .cse1 .cse8 .cse10) .cse0 .cse5 .cse6 .cse7 .cse2 .cse9))) [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1457-3(lines 1457 1481) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1457-4(lines 1457 1481) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L2448-3(lines 2448 2452) no Hoare annotation was computed. [2018-12-31 09:38:53,823 INFO L448 ceAbstractionStarter]: For program point L1259(lines 1259 1275) no Hoare annotation was computed. [2018-12-31 09:38:53,825 INFO L444 ceAbstractionStarter]: At program point L2448-5(lines 1 2844) the Hoare annotation is: false [2018-12-31 09:38:53,825 INFO L448 ceAbstractionStarter]: For program point L2713-1(lines 2713 2724) no Hoare annotation was computed. [2018-12-31 09:38:53,825 INFO L448 ceAbstractionStarter]: For program point L2713(lines 2713 2724) no Hoare annotation was computed. [2018-12-31 09:38:53,825 INFO L448 ceAbstractionStarter]: For program point L1458(lines 1458 1466) no Hoare annotation was computed. [2018-12-31 09:38:53,825 INFO L448 ceAbstractionStarter]: For program point L1458-2(lines 1458 1466) no Hoare annotation was computed. [2018-12-31 09:38:53,825 INFO L448 ceAbstractionStarter]: For program point L1392(lines 1392 1438) no Hoare annotation was computed. [2018-12-31 09:38:53,825 INFO L448 ceAbstractionStarter]: For program point L1392-1(lines 1392 1438) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L1458-4(lines 1458 1466) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L1260(lines 1260 1271) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L1458-6(lines 1458 1466) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L1458-8(lines 1458 1466) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L2185(lines 2185 2189) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L2185-3(lines 2185 2189) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L444 ceAbstractionStarter]: At program point L2185-2(lines 2178 2193) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 1 ULTIMATE.start_sendEmail_~sender) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,826 INFO L448 ceAbstractionStarter]: For program point L2053(lines 2053 2060) no Hoare annotation was computed. [2018-12-31 09:38:53,826 INFO L444 ceAbstractionStarter]: At program point L2185-5(lines 2178 2193) the Hoare annotation is: (let ((.cse6 (= 1 ULTIMATE.start_outgoing_~client)) (.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse2 (= 1 ~bob~0)) (.cse5 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse3 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse10 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse12 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse9 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse4 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 .cse2 (not (= ~__ste_client_privateKey0~0 0)) .cse3 .cse4 .cse5 .cse6 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse6 .cse1 .cse2 (and .cse5 .cse0 (= 0 ~__ste_email_isSigned0~0) .cse3 .cse10 .cse12) .cse7 .cse8 .cse9 .cse4 .cse11))) [2018-12-31 09:38:53,827 INFO L444 ceAbstractionStarter]: At program point L2053-1(lines 1910 2074) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L2185-6(lines 2185 2189) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L444 ceAbstractionStarter]: At program point L2185-8(lines 2178 2193) the Hoare annotation is: false [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1393(lines 1393 1404) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1393-1(lines 1393 1404) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1922(lines 1922 1929) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1130(lines 1130 1142) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1130-2(lines 1130 1142) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1130-4(lines 1130 1142) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1989(lines 1989 1993) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1130-6(lines 1130 1142) no Hoare annotation was computed. [2018-12-31 09:38:53,827 INFO L448 ceAbstractionStarter]: For program point L1130-8(lines 1130 1142) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L1130-10(lines 1130 1142) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L444 ceAbstractionStarter]: At program point L1725(lines 1705 1727) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L1461(lines 1461 1465) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L1461-3(lines 1461 1465) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L1461-6(lines 1461 1465) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L1461-9(lines 1461 1465) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L1461-12(lines 1461 1465) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L2717-1(lines 2713 2724) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L2717(lines 2717 2721) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L2717-3(lines 2713 2724) no Hoare annotation was computed. [2018-12-31 09:38:53,828 INFO L448 ceAbstractionStarter]: For program point L2717-2(lines 2717 2721) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1264(lines 1264 1270) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1397(lines 1397 1403) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1397-1(lines 1397 1403) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1133(lines 1133 1141) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1133-2(lines 1133 1141) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1133-4(lines 1133 1141) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1133-6(lines 1133 1141) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1133-8(lines 1133 1141) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L1133-10(lines 1133 1141) no Hoare annotation was computed. [2018-12-31 09:38:53,837 INFO L448 ceAbstractionStarter]: For program point L2653-1(lines 2653 2663) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L2653(lines 2653 2663) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L2389-1(lines 2389 2400) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L2389(lines 2389 2400) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L2389-3(lines 2389 2400) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L2389-2(lines 2389 2400) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L1136(lines 1136 1140) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L444 ceAbstractionStarter]: At program point L1136-2(lines 1 2844) the Hoare annotation is: (and (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (not (= ULTIMATE.start_setClientId_~handle 2)) (= 0 ~__ste_email_isSigned0~0) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,838 INFO L448 ceAbstractionStarter]: For program point L1136-3(lines 1136 1140) no Hoare annotation was computed. [2018-12-31 09:38:53,838 INFO L444 ceAbstractionStarter]: At program point L1136-5(lines 1 2844) the Hoare annotation is: (and (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= ULTIMATE.start_setClientId_~handle 2) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_rjh_~rjh___0) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,839 INFO L444 ceAbstractionStarter]: At program point L1995(lines 1985 2068) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,842 INFO L448 ceAbstractionStarter]: For program point L1136-6(lines 1136 1140) no Hoare annotation was computed. [2018-12-31 09:38:53,842 INFO L444 ceAbstractionStarter]: At program point L1136-8(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (not (= ULTIMATE.start_setClientPrivateKey_~handle 2)) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setClientPrivateKey_~handle 1)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,842 INFO L448 ceAbstractionStarter]: For program point L1136-9(lines 1136 1140) no Hoare annotation was computed. [2018-12-31 09:38:53,842 INFO L444 ceAbstractionStarter]: At program point L1136-11(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,842 INFO L448 ceAbstractionStarter]: For program point L1136-12(lines 1136 1140) no Hoare annotation was computed. [2018-12-31 09:38:53,842 INFO L444 ceAbstractionStarter]: At program point L1136-14(lines 1851 1860) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,842 INFO L448 ceAbstractionStarter]: For program point L1136-15(lines 1136 1140) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L444 ceAbstractionStarter]: At program point L1136-17(lines 1841 1850) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L2657-1(lines 2657 2662) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L2657(lines 2657 2662) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L1468(lines 1468 1480) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L444 ceAbstractionStarter]: At program point L1468-1(lines 1442 1485) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L1468-2(lines 1468 1480) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L444 ceAbstractionStarter]: At program point L1468-3(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L2393-1(lines 2393 2399) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L1468-4(lines 1468 1480) no Hoare annotation was computed. [2018-12-31 09:38:53,843 INFO L448 ceAbstractionStarter]: For program point L2393(lines 2393 2399) no Hoare annotation was computed. [2018-12-31 09:38:53,847 INFO L444 ceAbstractionStarter]: At program point L1468-5(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,847 INFO L448 ceAbstractionStarter]: For program point L2393-3(lines 2393 2399) no Hoare annotation was computed. [2018-12-31 09:38:53,847 INFO L448 ceAbstractionStarter]: For program point L1468-6(lines 1468 1480) no Hoare annotation was computed. [2018-12-31 09:38:53,847 INFO L448 ceAbstractionStarter]: For program point L2393-2(lines 2393 2399) no Hoare annotation was computed. [2018-12-31 09:38:53,847 INFO L444 ceAbstractionStarter]: At program point L1468-7(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,847 INFO L448 ceAbstractionStarter]: For program point L1204(lines 1204 1214) no Hoare annotation was computed. [2018-12-31 09:38:53,847 INFO L448 ceAbstractionStarter]: For program point L1468-8(lines 1468 1480) no Hoare annotation was computed. [2018-12-31 09:38:53,847 INFO L448 ceAbstractionStarter]: For program point L1204-1(lines 1204 1214) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L444 ceAbstractionStarter]: At program point L1468-9(lines 1 2844) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1204-2(lines 1204 1214) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1204-3(lines 1204 1214) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1204-4(lines 1204 1214) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L444 ceAbstractionStarter]: At program point L1931(lines 1918 2073) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1469(lines 1469 1477) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1469-2(lines 1469 1477) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1469-4(lines 1469 1477) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1469-6(lines 1469 1477) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1469-8(lines 1469 1477) no Hoare annotation was computed. [2018-12-31 09:38:53,848 INFO L448 ceAbstractionStarter]: For program point L1866(line 1866) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 1866) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1866-1(line 1866) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1338(lines 1338 1384) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1339(lines 1339 1350) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L2000(lines 2000 2007) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1472(lines 1472 1476) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1406(lines 1406 1437) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1472-3(lines 1472 1476) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1406-1(lines 1406 1437) no Hoare annotation was computed. [2018-12-31 09:38:53,849 INFO L444 ceAbstractionStarter]: At program point L1274(lines 1227 1280) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,849 INFO L448 ceAbstractionStarter]: For program point L1472-6(lines 1472 1476) no Hoare annotation was computed. [2018-12-31 09:38:53,850 INFO L448 ceAbstractionStarter]: For program point L1472-9(lines 1472 1476) no Hoare annotation was computed. [2018-12-31 09:38:53,855 INFO L448 ceAbstractionStarter]: For program point L1472-12(lines 1472 1476) no Hoare annotation was computed. [2018-12-31 09:38:53,855 INFO L444 ceAbstractionStarter]: At program point L2398(lines 2385 2403) the Hoare annotation is: (let ((.cse7 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse2 (= 1 ~bob~0)) (.cse9 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse13 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse6 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing_~client)) (.cse3 (= ULTIMATE.start_main_~tmp~7 1)) (.cse4 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse8 (= ULTIMATE.start_isSigned_~handle 1)) (.cse12 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse10 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse14 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) (.cse11 (= 1 ULTIMATE.start_createEmail_~msg~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 (= 0 |ULTIMATE.start_isSigned_#res|) (= 0 ~__ste_email_isSigned0~0) .cse8 .cse9 .cse10 .cse11) .cse12 .cse13 .cse14) (and .cse7 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 .cse2 (not (= ~__ste_client_privateKey0~0 0)) .cse9 .cse13 .cse6 .cse0 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse3 .cse4 .cse5 .cse8 .cse12 .cse10 .cse14 .cse11))) [2018-12-31 09:38:53,855 INFO L448 ceAbstractionStarter]: For program point L1407(lines 1407 1418) no Hoare annotation was computed. [2018-12-31 09:38:53,855 INFO L448 ceAbstractionStarter]: For program point L1407-1(lines 1407 1418) no Hoare annotation was computed. [2018-12-31 09:38:53,855 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2018-12-31 09:38:53,855 INFO L444 ceAbstractionStarter]: At program point L2398-2(lines 2385 2403) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isSigned_#res|) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1))) [2018-12-31 09:38:53,856 INFO L444 ceAbstractionStarter]: At program point L2398-1(lines 2385 2403) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,856 INFO L451 ceAbstractionStarter]: At program point L2398-3(lines 2385 2403) the Hoare annotation is: true [2018-12-31 09:38:53,856 INFO L448 ceAbstractionStarter]: For program point L2200(lines 2200 2211) no Hoare annotation was computed. [2018-12-31 09:38:53,856 INFO L448 ceAbstractionStarter]: For program point L2200-1(lines 2200 2211) no Hoare annotation was computed. [2018-12-31 09:38:53,856 INFO L448 ceAbstractionStarter]: For program point L1936(lines 1936 1940) no Hoare annotation was computed. [2018-12-31 09:38:53,856 INFO L448 ceAbstractionStarter]: For program point L1738(lines 1738 1745) no Hoare annotation was computed. [2018-12-31 09:38:53,856 INFO L451 ceAbstractionStarter]: At program point L1738-1(lines 1738 1745) the Hoare annotation is: true [2018-12-31 09:38:53,856 INFO L448 ceAbstractionStarter]: For program point L2730(lines 2730 2744) no Hoare annotation was computed. [2018-12-31 09:38:53,856 INFO L448 ceAbstractionStarter]: For program point L2730-2(lines 2730 2744) no Hoare annotation was computed. [2018-12-31 09:38:53,859 INFO L444 ceAbstractionStarter]: At program point L2730-1(lines 2700 2747) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,859 INFO L451 ceAbstractionStarter]: At program point L2730-3(lines 2700 2747) the Hoare annotation is: true [2018-12-31 09:38:53,859 INFO L448 ceAbstractionStarter]: For program point L1541(lines 1541 1557) no Hoare annotation was computed. [2018-12-31 09:38:53,859 INFO L448 ceAbstractionStarter]: For program point L1541-1(lines 1541 1557) no Hoare annotation was computed. [2018-12-31 09:38:53,859 INFO L448 ceAbstractionStarter]: For program point L1343(lines 1343 1349) no Hoare annotation was computed. [2018-12-31 09:38:53,859 INFO L451 ceAbstractionStarter]: At program point L2665-1(lines 2644 2668) the Hoare annotation is: true [2018-12-31 09:38:53,859 INFO L444 ceAbstractionStarter]: At program point L2665(lines 2644 2668) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse1 (= 1 ~bob~0)) (.cse2 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse3 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse4 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse5 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse6 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse7 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse8 (not (= 0 ULTIMATE.start_verify_~tmp~15))) (.cse9 (= 1 ULTIMATE.start_outgoing_~client)) (.cse10 (not (= 0 |ULTIMATE.start_isReadable_#res|))) (.cse11 (= ULTIMATE.start_main_~tmp~7 1)) (.cse12 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse13 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse14 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse15 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 (and .cse3 .cse4 (and (= 0 ~__ste_email_isSigned0~0) .cse5) .cse6 .cse7) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse0 .cse1 .cse2 (let ((.cse16 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse17 (and .cse3 .cse4 .cse5 .cse6 .cse7)) (.cse18 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse16 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse17 .cse18) (and .cse16 .cse17 .cse18 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0))))) .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15))) [2018-12-31 09:38:53,860 INFO L448 ceAbstractionStarter]: For program point L1411(lines 1411 1417) no Hoare annotation was computed. [2018-12-31 09:38:53,860 INFO L448 ceAbstractionStarter]: For program point L1411-1(lines 1411 1417) no Hoare annotation was computed. [2018-12-31 09:38:53,860 INFO L444 ceAbstractionStarter]: At program point L1213(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= ULTIMATE.start_test_~op1~0 0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,860 INFO L448 ceAbstractionStarter]: For program point L2204(lines 2204 2210) no Hoare annotation was computed. [2018-12-31 09:38:53,860 INFO L444 ceAbstractionStarter]: At program point L1213-1(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,860 INFO L444 ceAbstractionStarter]: At program point L1213-2(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,862 INFO L444 ceAbstractionStarter]: At program point L1213-3(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,862 INFO L448 ceAbstractionStarter]: For program point L2204-1(lines 2204 2210) no Hoare annotation was computed. [2018-12-31 09:38:53,862 INFO L444 ceAbstractionStarter]: At program point L1213-4(lines 1193 1217) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,862 INFO L448 ceAbstractionStarter]: For program point L1545(lines 1545 1556) no Hoare annotation was computed. [2018-12-31 09:38:53,862 INFO L448 ceAbstractionStarter]: For program point L1545-1(lines 1545 1556) no Hoare annotation was computed. [2018-12-31 09:38:53,862 INFO L444 ceAbstractionStarter]: At program point L1942(lines 1932 2072) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,862 INFO L448 ceAbstractionStarter]: For program point L2735(lines 2735 2741) no Hoare annotation was computed. [2018-12-31 09:38:53,862 INFO L448 ceAbstractionStarter]: For program point L2735-2(lines 2735 2741) no Hoare annotation was computed. [2018-12-31 09:38:53,863 INFO L444 ceAbstractionStarter]: At program point L2075(lines 1909 2076) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0)) [2018-12-31 09:38:53,863 INFO L444 ceAbstractionStarter]: At program point L2009(lines 1996 2067) the Hoare annotation is: (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (= ULTIMATE.start_main_~tmp~7 1) (= 0 ~__ste_email_isSigned0~0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setClientId_~handle 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1))) [2018-12-31 09:38:53,863 INFO L444 ceAbstractionStarter]: At program point L490(lines 1 2844) the Hoare annotation is: (and (= 1 ~queue_empty~0) (= 0 ~__ste_email_isSigned0~0)) [2018-12-31 09:38:53,863 INFO L448 ceAbstractionStarter]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2018-12-31 09:38:53,863 INFO L451 ceAbstractionStarter]: At program point L1746(lines 1728 1748) the Hoare annotation is: true [2018-12-31 09:38:53,863 INFO L451 ceAbstractionStarter]: At program point L2209-1(lines 2196 2214) the Hoare annotation is: true [2018-12-31 09:38:53,863 INFO L444 ceAbstractionStarter]: At program point L2209(lines 2196 2214) the Hoare annotation is: (let ((.cse0 (= 1 ULTIMATE.start_outgoing_~client)) (.cse8 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse9 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse13 (= ULTIMATE.start_isSigned_~handle 1)) (.cse11 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse14 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse15 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse2 (= 1 ~bob~0)) (.cse3 (= ULTIMATE.start_main_~tmp~7 1)) (.cse4 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse5 (= 1 ULTIMATE.start___utac_acc__SignForward_spec__1_~client)) (.cse6 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse7 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse16 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (let ((.cse10 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0)) (.cse12 (not (= ~__ste_client_privateKey0~0 0)))) (or (and .cse8 .cse9 .cse10 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse11 .cse12 .cse13 .cse14 .cse15) (and .cse8 .cse9 .cse10 .cse11 .cse12 (not (= ULTIMATE.start___utac_acc__SignForward_spec__1_~tmp~0 0)) .cse13 .cse14 .cse15))) .cse16) (and .cse0 (and .cse8 .cse9 .cse13 (and (= 0 ~__ste_email_isSigned0~0) .cse11) .cse14 .cse15) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse16))) [2018-12-31 09:38:53,863 INFO L448 ceAbstractionStarter]: For program point L1549(lines 1549 1555) no Hoare annotation was computed. [2018-12-31 09:38:53,863 INFO L448 ceAbstractionStarter]: For program point L1549-1(lines 1549 1555) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L2408(lines 2408 2416) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L2408-2(lines 2408 2416) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1285(lines 1285 1321) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1285-1(lines 1285 1321) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1285-2(lines 1285 1321) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1285-3(lines 1285 1321) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1153(lines 1153 1169) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1285-4(lines 1285 1321) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1153-1(lines 1153 1169) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1153-2(lines 1153 1169) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1153-3(lines 1153 1169) no Hoare annotation was computed. [2018-12-31 09:38:53,864 INFO L448 ceAbstractionStarter]: For program point L1153-4(lines 1153 1169) no Hoare annotation was computed. [2018-12-31 09:38:53,865 INFO L448 ceAbstractionStarter]: For program point L1682(lines 1682 1690) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1352(lines 1352 1383) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1286(lines 1286 1294) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1286-2(lines 1286 1294) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1286-4(lines 1286 1294) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1286-6(lines 1286 1294) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1286-8(lines 1286 1294) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1947(lines 1947 1954) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1353(lines 1353 1364) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L2014(lines 2014 2018) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1420(lines 1420 1436) no Hoare annotation was computed. [2018-12-31 09:38:53,869 INFO L448 ceAbstractionStarter]: For program point L1420-1(lines 1420 1436) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L2411(lines 2411 2415) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L2411-3(lines 2411 2415) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L444 ceAbstractionStarter]: At program point L2411-2(lines 2404 2419) the Hoare annotation is: (and (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (= 1 ~bob~0) (not (= ~__ste_client_privateKey0~0 0)) (= 1 |ULTIMATE.start_createEmail_#res|) (= ULTIMATE.start_getClientPrivateKey_~handle 1) (not (= ULTIMATE.start_setClientId_~handle 1)) (= 1 ULTIMATE.start_outgoing_~msg) (= 1 ULTIMATE.start_outgoing_~client) (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) (= ULTIMATE.start_main_~tmp~7 1) (= 1 ULTIMATE.start_sendEmail_~sender) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0) (= 1 ULTIMATE.start_createEmail_~msg~0)) [2018-12-31 09:38:53,870 INFO L444 ceAbstractionStarter]: At program point L2411-5(lines 2404 2419) the Hoare annotation is: false [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L1421(lines 1421 1432) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L1421-1(lines 1421 1432) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L1289(lines 1289 1293) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L1289-3(lines 1289 1293) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L1157(lines 1157 1168) no Hoare annotation was computed. [2018-12-31 09:38:53,870 INFO L448 ceAbstractionStarter]: For program point L1157-1(lines 1157 1168) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L448 ceAbstractionStarter]: For program point L1157-2(lines 1157 1168) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L448 ceAbstractionStarter]: For program point L1289-6(lines 1289 1293) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L448 ceAbstractionStarter]: For program point L1157-3(lines 1157 1168) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L448 ceAbstractionStarter]: For program point L1157-4(lines 1157 1168) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L448 ceAbstractionStarter]: For program point L1289-9(lines 1289 1293) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L448 ceAbstractionStarter]: For program point L1289-12(lines 1289 1293) no Hoare annotation was computed. [2018-12-31 09:38:53,871 INFO L444 ceAbstractionStarter]: At program point L1554(lines 1537 1560) the Hoare annotation is: (let ((.cse6 (= 1 ULTIMATE.start_outgoing_~client)) (.cse1 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~client)) (.cse2 (= 1 ~bob~0)) (.cse5 (= 1 ULTIMATE.start_outgoing_~msg)) (.cse0 (= 1 ULTIMATE.start_outgoing__wrappee__Keys_~msg)) (.cse3 (= 1 |ULTIMATE.start_createEmail_#res|)) (.cse10 (and (= ULTIMATE.start_setClientId_~handle ULTIMATE.start_setup_chuck_~chuck___0) (not (= ULTIMATE.start_setup_chuck_~chuck___0 2)) (not (= ULTIMATE.start_setup_rjh_~rjh___0 1)) (not (= ULTIMATE.start_setClientId_~handle 1)))) (.cse12 (= 1 ULTIMATE.start_createEmail_~msg~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 1)) (.cse8 (= 1 ULTIMATE.start_sendEmail_~sender)) (.cse9 (= ULTIMATE.start_main_~tmp~7 ~queue_empty~0)) (.cse4 (= ULTIMATE.start_getClientPrivateKey_~handle 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| ~queue_empty~0))) (or (and .cse0 (= ULTIMATE.start_sign_~privkey~0 ~__ste_client_privateKey0~0) .cse1 .cse2 (not (= ~__ste_client_privateKey0~0 0)) .cse3 .cse4 .cse5 .cse6 (= ~__ste_client_privateKey0~0 |ULTIMATE.start_getClientPrivateKey_#res|) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse6 .cse1 .cse2 (and .cse5 .cse0 (= 0 ~__ste_email_isSigned0~0) .cse3 .cse10 .cse12) .cse7 .cse8 .cse9 .cse4 .cse11))) [2018-12-31 09:38:53,871 INFO L444 ceAbstractionStarter]: At program point L1554-1(lines 1537 1560) the Hoare annotation is: false [2018-12-31 09:38:53,999 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 31.12 09:38:53 BoogieIcfgContainer [2018-12-31 09:38:53,999 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-12-31 09:38:54,000 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-31 09:38:54,000 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-31 09:38:54,000 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-31 09:38:54,001 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 31.12 09:38:28" (3/4) ... [2018-12-31 09:38:54,005 INFO L144 WitnessPrinter]: Generating witness for correct program [2018-12-31 09:38:54,047 INFO L905 BoogieBacktranslator]: Reduced CFG by removing 133 nodes and edges [2018-12-31 09:38:54,052 INFO L905 BoogieBacktranslator]: Reduced CFG by removing 75 nodes and edges [2018-12-31 09:38:54,056 INFO L905 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2018-12-31 09:38:54,060 INFO L905 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2018-12-31 09:38:54,064 INFO L905 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2018-12-31 09:38:54,103 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (1 == queue_empty && 0 == __ste_email_isSigned0) && \result == queue_empty [2018-12-31 09:38:54,105 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == bob && tmp == 1) && !(handle == 2)) && 0 == __ste_email_isSigned0) && tmp == queue_empty) && \result == queue_empty [2018-12-31 09:38:54,107 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == bob && tmp == 1) && !(handle == 2)) && 0 == __ste_email_isSigned0) && tmp == queue_empty) && \result == queue_empty [2018-12-31 09:38:54,108 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == bob && tmp == 1) && handle == 2) && 0 == __ste_email_isSigned0) && handle == rjh___0) && tmp == queue_empty) && \result == queue_empty [2018-12-31 09:38:54,108 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == bob && tmp == 1) && handle == 2) && 0 == __ste_email_isSigned0) && !(handle == 1)) && handle == rjh___0) && tmp == queue_empty) && \result == queue_empty [2018-12-31 09:38:54,108 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && !(handle == 1)) && tmp == queue_empty) && !(handle == 1)) && !(rjh___0 == 1)) && \result == queue_empty [2018-12-31 09:38:54,109 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == bob) && !(handle == 2)) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && !(handle == 1)) && tmp == queue_empty) && !(handle == 1)) && !(rjh___0 == 1)) && \result == queue_empty [2018-12-31 09:38:54,109 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == bob) && !(handle == 2)) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && !(handle == 1)) && tmp == queue_empty) && !(handle == 1)) && !(rjh___0 == 1)) && \result == queue_empty [2018-12-31 09:38:54,109 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,113 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty [2018-12-31 09:38:54,114 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,115 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,115 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,115 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,115 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,116 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,116 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,116 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,116 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,117 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,117 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,124 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,125 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg [2018-12-31 09:38:54,126 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,127 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg [2018-12-31 09:38:54,127 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,127 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,127 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,127 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && 1 == \result) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg [2018-12-31 09:38:54,128 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,128 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,134 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,134 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,134 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,134 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,135 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,135 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,135 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,138 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,138 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,138 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,138 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,138 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,139 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,139 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((handle == chuck___0 && 1 == bob) && 1 == \result) && handle == 1) && !(handle == 1)) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && \result == queue_empty) && 1 == msg [2018-12-31 09:38:54,140 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,140 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,140 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,140 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,140 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,144 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((privkey == __ste_client_privateKey0 && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) || (((((((1 == client && (((1 == msg && 0 == __ste_email_isSigned0) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && 1 == bob) && tmp == 1) && 1 == sender) && tmp == queue_empty) && handle == 1) && \result == queue_empty) [2018-12-31 09:38:54,144 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,144 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,145 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && !(handle == 1)) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && \result == queue_empty) && 1 == msg [2018-12-31 09:38:54,145 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,145 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) || ((((((((1 == client && 1 == client) && 1 == bob) && ((((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && tmp == 1) && 1 == sender) && tmp == queue_empty) && handle == 1) && \result == queue_empty) [2018-12-31 09:38:54,145 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) || ((((((((1 == client && 1 == client) && 1 == bob) && ((((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && tmp == 1) && 1 == sender) && tmp == queue_empty) && handle == 1) && \result == queue_empty) [2018-12-31 09:38:54,145 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,149 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) [2018-12-31 09:38:54,149 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == client && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && ((((((1 == msg && 1 == msg) && 0 == \result) && 0 == __ste_email_isSigned0) && handle == 1) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && tmp == queue_empty) && handle == 1) && \result == queue_empty) || (((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && 1 == client) && handle == 1) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) [2018-12-31 09:38:54,149 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == client && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == \result) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)) && handle == 1) && 1 == \result) && 1 == msg))) && \result == queue_empty) || (((((((((1 == client && ((((1 == msg && 1 == msg) && handle == 1) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && \result == queue_empty) [2018-12-31 09:38:54,149 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && !(handle == 1)) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && 1 == client) && handle == 1) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && \result == queue_empty) && 1 == msg [2018-12-31 09:38:54,149 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == client && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == \result) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)) && handle == 1) && 1 == \result) && 1 == msg))) && \result == queue_empty) || (((((((((1 == client && ((((1 == msg && 1 == msg) && handle == 1) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && \result == queue_empty) [2018-12-31 09:38:54,150 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == client && 1 == bob) && handle == 1) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == \result) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)) && handle == 1) && 1 == \result) && 1 == msg))) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || ((((((((((1 == client && 1 == bob) && handle == 1) && ((((1 == msg && 1 == msg) && handle == 1) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,150 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,150 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,150 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,150 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == \result)) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || ((((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == \result)) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,150 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,151 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,151 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,151 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) [2018-12-31 09:38:54,152 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == \result && handle == chuck___0) && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1) [2018-12-31 09:38:54,152 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((handle == chuck___0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && !(chuck___0 == 2)) && 1 == \result) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg [2018-12-31 09:38:54,402 INFO L145 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2018-12-31 09:38:54,402 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-31 09:38:54,403 INFO L168 Benchmark]: Toolchain (without parser) took 30396.20 ms. Allocated memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: 412.1 MB). Free memory was 943.3 MB in the beginning and 822.5 MB in the end (delta: 120.9 MB). Peak memory consumption was 532.9 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,405 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.2 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-31 09:38:54,407 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1162.22 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.3 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -158.4 MB). Peak memory consumption was 45.6 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,407 INFO L168 Benchmark]: Boogie Procedure Inliner took 138.50 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,408 INFO L168 Benchmark]: Boogie Preprocessor took 132.90 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,408 INFO L168 Benchmark]: RCFGBuilder took 3144.92 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 913.3 MB in the end (delta: 168.1 MB). Peak memory consumption was 168.1 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,408 INFO L168 Benchmark]: TraceAbstraction took 25408.57 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 275.8 MB). Free memory was 913.3 MB in the beginning and 858.1 MB in the end (delta: 55.2 MB). Peak memory consumption was 391.2 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,409 INFO L168 Benchmark]: Witness Printer took 402.54 ms. Allocated memory is still 1.4 GB. Free memory was 858.1 MB in the beginning and 822.5 MB in the end (delta: 35.7 MB). Peak memory consumption was 35.7 MB. Max. memory is 11.5 GB. [2018-12-31 09:38:54,415 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.2 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1162.22 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.3 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -158.4 MB). Peak memory consumption was 45.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 138.50 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 132.90 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 3144.92 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 913.3 MB in the end (delta: 168.1 MB). Peak memory consumption was 168.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 25408.57 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 275.8 MB). Free memory was 913.3 MB in the beginning and 858.1 MB in the end (delta: 55.2 MB). Peak memory consumption was 391.2 MB. Max. memory is 11.5 GB. * Witness Printer took 402.54 ms. Allocated memory is still 1.4 GB. Free memory was 858.1 MB in the beginning and 822.5 MB in the end (delta: 35.7 MB). Peak memory consumption was 35.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 1866]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 2830]: Loop Invariant Derived loop invariant: ((((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && 1 == \result) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1943]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2422]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1149]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2617]: Loop Invariant Derived loop invariant: ((((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == \result)) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || ((((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == \result)) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && handle == chuck___0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && !(handle == 1)) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && 1 == client) && handle == 1) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) || ((((((((1 == client && 1 == client) && 1 == bob) && ((((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && tmp == 1) && 1 == sender) && tmp == queue_empty) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1537]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((handle == chuck___0 && __ste_client_privateKey0 == \result) && !(__ste_client_privateKey0 == 0)) && !(chuck___0 == 2)) && 1 == \result) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2159]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 2635]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1932]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1918]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: (((((((((1 == client && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == \result) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)) && handle == 1) && 1 == \result) && 1 == msg))) && \result == queue_empty) || (((((((((1 == client && ((((1 == msg && 1 == msg) && handle == 1) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((1 == client && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == \result) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)) && handle == 1) && 1 == \result) && 1 == msg))) && \result == queue_empty) || (((((((((1 == client && ((((1 == msg && 1 == msg) && handle == 1) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 1 == queue_empty && 0 == __ste_email_isSigned0 - InvariantResult [Line: 1102]: Loop Invariant Derived loop invariant: ((((((((((((((handle == chuck___0 && 1 == bob) && 1 == \result) && handle == 1) && !(handle == 1)) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2035]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2196]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1738]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: (((((((((((((((privkey == __ste_client_privateKey0 && handle == chuck___0) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && !(handle == 1)) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 2021]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (1 == queue_empty && 0 == __ste_email_isSigned0) && \result == queue_empty - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2404]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((privkey == __ste_client_privateKey0 && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) || (((((((1 == client && (((1 == msg && 0 == __ste_email_isSigned0) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && 1 == bob) && tmp == 1) && 1 == sender) && tmp == queue_empty) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 2010]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) || ((((((((1 == client && 1 == client) && 1 == bob) && ((((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && tmp == 1) && 1 == sender) && tmp == queue_empty) && handle == 1) && \result == queue_empty) - InvariantResult [Line: 1910]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1996]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1851]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: ((((((((((1 == client && 1 == bob) && handle == 1) && (((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && __ste_client_privateKey0 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && handle == 1) && 1 == \result) && 1 == msg) || ((((((((1 == msg && 1 == msg) && privkey == __ste_client_privateKey0) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)) && handle == 1) && 1 == \result) && 1 == msg))) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || ((((((((((1 == client && 1 == bob) && handle == 1) && ((((1 == msg && 1 == msg) && handle == 1) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1841]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((1 == bob && tmp == 1) && handle == 2) && 0 == __ste_email_isSigned0) && handle == rjh___0) && tmp == queue_empty) && \result == queue_empty - InvariantResult [Line: 1728]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2626]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 2700]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == bob) && !(handle == 2)) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && !(handle == 1)) && tmp == queue_empty) && !(handle == 1)) && !(rjh___0 == 1)) && \result == queue_empty - InvariantResult [Line: 2178]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1749]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1909]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && !(handle == 1)) && tmp == queue_empty) && !(handle == 1)) && !(rjh___0 == 1)) && \result == queue_empty - InvariantResult [Line: 1442]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1281]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1173]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1227]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1388]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == bob && tmp == 1) && !(handle == 2)) && 0 == __ste_email_isSigned0) && tmp == queue_empty) && \result == queue_empty - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((1 == bob && tmp == 1) && !(handle == 2)) && 0 == __ste_email_isSigned0) && tmp == queue_empty) && \result == queue_empty - InvariantResult [Line: 1985]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((1 == bob && tmp == 1) && handle == 2) && 0 == __ste_email_isSigned0) && !(handle == 1)) && handle == rjh___0) && tmp == queue_empty) && \result == queue_empty - InvariantResult [Line: 2215]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 1 == sender) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg - InvariantResult [Line: 1971]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((1 == client && 1 == client) && 1 == bob) && tmp == 1) && 1 == sender) && 1 == client) && ((((((1 == msg && 1 == msg) && 0 == \result) && 0 == __ste_email_isSigned0) && handle == 1) && 1 == \result) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == msg) && tmp == queue_empty) && handle == 1) && \result == queue_empty) || (((((((((((((((((1 == msg && privkey == __ste_client_privateKey0) && 1 == client) && 1 == bob) && !(__ste_client_privateKey0 == 0)) && 1 == \result) && handle == 1) && 1 == msg) && 1 == client) && __ste_client_privateKey0 == \result) && tmp == 1) && 1 == sender) && 1 == client) && handle == 1) && tmp == queue_empty) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && \result == queue_empty) && 1 == msg) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 1957]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1705]: Loop Invariant Derived loop invariant: (((((((((handle == chuck___0 && 1 == bob) && !(handle == 2)) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && !(handle == 1)) && tmp == queue_empty) && !(handle == 1)) && !(rjh___0 == 1)) && \result == queue_empty - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 2644]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 2594]: Loop Invariant Derived loop invariant: (((((((((((1 == client && 1 == bob) && handle == 1) && (((1 == msg && 1 == msg) && 0 == __ste_email_isSigned0 && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) || (((((((((((1 == client && 1 == bob) && handle == 1) && ((((privkey == __ste_client_privateKey0 && __ste_client_privateKey0 == \result) && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) || (((privkey == __ste_client_privateKey0 && (((1 == msg && 1 == msg) && ((handle == chuck___0 && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1)) && 1 == \result) && 1 == msg) && !(__ste_client_privateKey0 == 0)) && !(tmp == 0)))) && !(0 == tmp)) && 1 == client) && !(0 == \result)) && tmp == 1) && 1 == sender) && 1 == client) && tmp == queue_empty) && \result == queue_empty) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 2385]: Loop Invariant Derived loop invariant: (((0 == \result && handle == chuck___0) && !(chuck___0 == 2)) && !(rjh___0 == 1)) && !(handle == 1) - InvariantResult [Line: 1334]: Loop Invariant Derived loop invariant: ((((((((handle == chuck___0 && op1 == 0) && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - InvariantResult [Line: 1193]: Loop Invariant Derived loop invariant: (((((((handle == chuck___0 && 1 == bob) && tmp == 1) && 0 == __ste_email_isSigned0) && !(chuck___0 == 2)) && tmp == queue_empty) && !(handle == 1)) && \result == queue_empty) && !(rjh___0 == 1) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 383 locations, 2 error locations. SAFE Result, 25.1s OverallTime, 14 OverallIterations, 2 TraceHistogramMax, 7.2s AutomataDifference, 0.0s DeadEndRemovalTime, 12.9s HoareAnnotationTime, HoareTripleCheckerStatistics: 9561 SDtfs, 16618 SDslu, 16106 SDs, 0 SdLazy, 612 SolverSat, 81 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 3.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 115 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 4.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=742occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 14 MinimizatonAttempts, 2225 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 256 NumberOfFragments, 4486 HoareAnnotationTreeSize, 93 FomulaSimplifications, 100537 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 93 FomulaSimplificationsInter, 58619 FormulaSimplificationTreeSizeReductionInter, 11.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 741 NumberOfCodeBlocks, 741 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 727 ConstructedInterpolants, 0 QuantifiedInterpolants, 72341 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 14 InterpolantComputations, 14 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...