java -Xmx6000000000 -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data ./data --generate-csv --csv-dir ../../../releaseScripts/default/UAutomizer-linux/csv -tc ../../../trunk/examples/toolchains/AbstractInterpretationC.xml -s ../../../trunk/examples/settings/ai/eq-bench/svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf -i ../../../trunk/examples/svcomp/forester-heap/dll-rb-sentinel_true-unreach-call_true-valid-memsafety.i


--------------------------------------------------------------------------------


This is Ultimate 0.1.23-6b94a2f
[2018-01-24 16:34:05,565 INFO  L170        SettingsManager]: Resetting all preferences to default values...
[2018-01-24 16:34:05,567 INFO  L174        SettingsManager]: Resetting UltimateCore preferences to default values
[2018-01-24 16:34:05,581 INFO  L177        SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring...
[2018-01-24 16:34:05,581 INFO  L174        SettingsManager]: Resetting Boogie Preprocessor preferences to default values
[2018-01-24 16:34:05,582 INFO  L174        SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values
[2018-01-24 16:34:05,583 INFO  L174        SettingsManager]: Resetting Abstract Interpretation preferences to default values
[2018-01-24 16:34:05,584 INFO  L174        SettingsManager]: Resetting LassoRanker preferences to default values
[2018-01-24 16:34:05,586 INFO  L174        SettingsManager]: Resetting Reaching Definitions preferences to default values
[2018-01-24 16:34:05,586 INFO  L174        SettingsManager]: Resetting SyntaxChecker preferences to default values
[2018-01-24 16:34:05,587 INFO  L177        SettingsManager]: Büchi Program Product provides no preferences, ignoring...
[2018-01-24 16:34:05,587 INFO  L174        SettingsManager]: Resetting LTL2Aut preferences to default values
[2018-01-24 16:34:05,588 INFO  L174        SettingsManager]: Resetting BlockEncodingV2 preferences to default values
[2018-01-24 16:34:05,589 INFO  L174        SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values
[2018-01-24 16:34:05,589 INFO  L174        SettingsManager]: Resetting BuchiAutomizer preferences to default values
[2018-01-24 16:34:05,592 INFO  L174        SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values
[2018-01-24 16:34:05,594 INFO  L174        SettingsManager]: Resetting CodeCheck preferences to default values
[2018-01-24 16:34:05,596 INFO  L174        SettingsManager]: Resetting InvariantSynthesis preferences to default values
[2018-01-24 16:34:05,598 INFO  L174        SettingsManager]: Resetting RCFGBuilder preferences to default values
[2018-01-24 16:34:05,599 INFO  L174        SettingsManager]: Resetting TraceAbstraction preferences to default values
[2018-01-24 16:34:05,602 INFO  L177        SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring...
[2018-01-24 16:34:05,602 INFO  L177        SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring...
[2018-01-24 16:34:05,602 INFO  L174        SettingsManager]: Resetting IcfgTransformer preferences to default values
[2018-01-24 16:34:05,603 INFO  L174        SettingsManager]: Resetting Boogie Printer preferences to default values
[2018-01-24 16:34:05,604 INFO  L174        SettingsManager]: Resetting Witness Printer preferences to default values
[2018-01-24 16:34:05,606 INFO  L177        SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring...
[2018-01-24 16:34:05,606 INFO  L174        SettingsManager]: Resetting CDTParser preferences to default values
[2018-01-24 16:34:05,607 INFO  L177        SettingsManager]: PEA to Boogie provides no preferences, ignoring...
[2018-01-24 16:34:05,607 INFO  L177        SettingsManager]: AutomataScriptParser provides no preferences, ignoring...
[2018-01-24 16:34:05,607 INFO  L174        SettingsManager]: Resetting Witness Parser preferences to default values
[2018-01-24 16:34:05,608 INFO  L181        SettingsManager]: Finished resetting all preferences to default values...
[2018-01-24 16:34:05,608 INFO  L98         SettingsManager]: Beginning loading settings from /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/ai/eq-bench/svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf
[2018-01-24 16:34:05,618 INFO  L110        SettingsManager]: Loading preferences was successful
[2018-01-24 16:34:05,619 INFO  L112        SettingsManager]: Preferences different from defaults after loading the file:
[2018-01-24 16:34:05,620 INFO  L131        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2018-01-24 16:34:05,620 INFO  L133        SettingsManager]:  * to procedures, called more than once=true
[2018-01-24 16:34:05,620 INFO  L131        SettingsManager]: Preferences of Abstract Interpretation differ from their defaults:
[2018-01-24 16:34:05,620 INFO  L133        SettingsManager]:  * Deactivate Weak Equivalences=true
[2018-01-24 16:34:05,621 INFO  L133        SettingsManager]:  * Abstract domain for RCFG-of-the-future=VPDomain
[2018-01-24 16:34:05,621 INFO  L133        SettingsManager]:  * Use the RCFG-of-the-future interface=true
[2018-01-24 16:34:05,621 INFO  L131        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2018-01-24 16:34:05,622 INFO  L133        SettingsManager]:  * sizeof long=4
[2018-01-24 16:34:05,622 INFO  L133        SettingsManager]:  * Check unreachability of error function in SV-COMP mode=false
[2018-01-24 16:34:05,622 INFO  L133        SettingsManager]:  * Overapproximate operations on floating types=true
[2018-01-24 16:34:05,622 INFO  L133        SettingsManager]:  * sizeof POINTER=4
[2018-01-24 16:34:05,622 INFO  L133        SettingsManager]:  * Check division by zero=IGNORE
[2018-01-24 16:34:05,623 INFO  L133        SettingsManager]:  * Check for the main procedure if all allocated memory was freed=true
[2018-01-24 16:34:05,623 INFO  L133        SettingsManager]:  * Bitprecise bitfields=true
[2018-01-24 16:34:05,623 INFO  L133        SettingsManager]:  * SV-COMP memtrack compatibility mode=true
[2018-01-24 16:34:05,623 INFO  L133        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2018-01-24 16:34:05,623 INFO  L133        SettingsManager]:  * sizeof long double=12
[2018-01-24 16:34:05,624 INFO  L131        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2018-01-24 16:34:05,624 INFO  L133        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2018-01-24 16:34:05,624 INFO  L133        SettingsManager]:  * To the following directory=./dump/
[2018-01-24 16:34:05,624 INFO  L133        SettingsManager]:  * Add additional assume for each assert=false
[2018-01-24 16:34:05,624 INFO  L133        SettingsManager]:  * SMT solver=External_DefaultMode
[2018-01-24 16:34:05,624 INFO  L133        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-01-24 16:34:05,625 INFO  L131        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2018-01-24 16:34:05,625 INFO  L133        SettingsManager]:  * Interpolant automaton=TWOTRACK
[2018-01-24 16:34:05,625 INFO  L133        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2018-01-24 16:34:05,625 INFO  L133        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles
[2018-01-24 16:34:05,626 INFO  L133        SettingsManager]:  * Trace refinement strategy=CAMEL
[2018-01-24 16:34:05,626 INFO  L133        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2018-01-24 16:34:05,626 INFO  L133        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2018-01-24 16:34:05,626 INFO  L133        SettingsManager]:  * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true
[2018-01-24 16:34:05,627 INFO  L131        SettingsManager]: Preferences of IcfgTransformer differ from their defaults:
[2018-01-24 16:34:05,627 INFO  L133        SettingsManager]:  * TransformationType=HEAP_SEPARATOR
[2018-01-24 16:34:05,664 INFO  L81    nceAwareModelManager]: Repository-Root is: /tmp
[2018-01-24 16:34:05,677 INFO  L266   ainManager$Toolchain]: [Toolchain 1]: Parser(s) successfully initialized
[2018-01-24 16:34:05,681 INFO  L222   ainManager$Toolchain]: [Toolchain 1]: Toolchain data selected.
[2018-01-24 16:34:05,683 INFO  L271        PluginConnector]: Initializing CDTParser...
[2018-01-24 16:34:05,684 INFO  L276        PluginConnector]: CDTParser initialized
[2018-01-24 16:34:05,684 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/forester-heap/dll-rb-sentinel_true-unreach-call_true-valid-memsafety.i
[2018-01-24 16:34:05,859 INFO  L304   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2018-01-24 16:34:05,864 INFO  L131        ToolchainWalker]: Walking toolchain with 4 elements.
[2018-01-24 16:34:05,865 INFO  L113        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2018-01-24 16:34:05,865 INFO  L271        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2018-01-24 16:34:05,871 INFO  L276        PluginConnector]: CACSL2BoogieTranslator initialized
[2018-01-24 16:34:05,872 INFO  L185        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.01 04:34:05" (1/1) ...
[2018-01-24 16:34:05,875 INFO  L205        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@28ea857c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:05, skipping insertion in model container
[2018-01-24 16:34:05,875 INFO  L185        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 24.01 04:34:05" (1/1) ...
[2018-01-24 16:34:05,891 INFO  L153             Dispatcher]: Using SV-COMP mode
[2018-01-24 16:34:05,935 INFO  L153             Dispatcher]: Using SV-COMP mode
[2018-01-24 16:34:06,067 INFO  L450          PostProcessor]: Settings: Checked method=main
[2018-01-24 16:34:06,093 INFO  L450          PostProcessor]: Settings: Checked method=main
[2018-01-24 16:34:06,104 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06 WrapperNode
[2018-01-24 16:34:06,104 INFO  L132        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2018-01-24 16:34:06,105 INFO  L113        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2018-01-24 16:34:06,105 INFO  L271        PluginConnector]: Initializing Boogie Preprocessor...
[2018-01-24 16:34:06,105 INFO  L276        PluginConnector]: Boogie Preprocessor initialized
[2018-01-24 16:34:06,122 INFO  L185        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,122 INFO  L185        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,133 INFO  L185        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,133 INFO  L185        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,142 INFO  L185        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,148 INFO  L185        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,150 INFO  L185        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,153 INFO  L132        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2018-01-24 16:34:06,154 INFO  L113        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2018-01-24 16:34:06,154 INFO  L271        PluginConnector]: Initializing RCFGBuilder...
[2018-01-24 16:34:06,154 INFO  L276        PluginConnector]: RCFGBuilder initialized
[2018-01-24 16:34:06,155 INFO  L185        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 24.01 04:34:06" (1/1) ...
No working directory specified, using /storage/ultimate/releaseScripts/default/UAutomizer-linux/z3
Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null)
Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000
[2018-01-24 16:34:06,208 INFO  L136     BoogieDeclarations]: Found implementation of procedure ULTIMATE.init
[2018-01-24 16:34:06,209 INFO  L136     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2018-01-24 16:34:06,209 INFO  L136     BoogieDeclarations]: Found implementation of procedure main
[2018-01-24 16:34:06,209 INFO  L128     BoogieDeclarations]: Found specification of procedure write~int
[2018-01-24 16:34:06,209 INFO  L128     BoogieDeclarations]: Found specification of procedure read~int
[2018-01-24 16:34:06,209 INFO  L128     BoogieDeclarations]: Found specification of procedure write~$Pointer$
[2018-01-24 16:34:06,209 INFO  L128     BoogieDeclarations]: Found specification of procedure read~$Pointer$
[2018-01-24 16:34:06,209 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.free
[2018-01-24 16:34:06,209 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure #Ultimate.alloc
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure malloc
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure free
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure __VERIFIER_error
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure main
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.init
[2018-01-24 16:34:06,210 INFO  L128     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2018-01-24 16:34:06,810 INFO  L257             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2018-01-24 16:34:06,811 INFO  L202        PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.01 04:34:06 BoogieIcfgContainer
[2018-01-24 16:34:06,811 INFO  L132        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2018-01-24 16:34:06,812 INFO  L113        PluginConnector]: ------------------------Abstract Interpretation----------------------------
[2018-01-24 16:34:06,812 INFO  L271        PluginConnector]: Initializing Abstract Interpretation...
[2018-01-24 16:34:06,812 INFO  L276        PluginConnector]: Abstract Interpretation initialized
[2018-01-24 16:34:06,813 INFO  L185        PluginConnector]: Executing the observer AbstractInterpretationRcfgObserver from plugin Abstract Interpretation for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 24.01 04:34:06" (1/1) ...
[2018-01-24 16:34:06,871 INFO  L101         FixpointEngine]: Starting fixpoint engine with domain VPDomain (maxUnwinding=3, maxParallelStates=2)
[2018-01-24 16:34:09,690 INFO  L259    AbstractInterpreter]: Some error location(s) were reachable
[2018-01-24 16:34:09,733 WARN  L343   cessorBacktranslator]: Generated EnsuresSpecification ensures #valid == old(#valid); is not ensure(true)
[2018-01-24 16:34:09,746 INFO  L268    AbstractInterpreter]: Visited 192 different actions 743 times. Merged at 121 different actions 357 times. Widened at 5 different actions 6 times. Found 35 fixpoints after 24 different actions. Largest state had 58 variables.
[2018-01-24 16:34:09,748 INFO  L132        PluginConnector]: ------------------------ END Abstract Interpretation----------------------------
[2018-01-24 16:34:09,749 INFO  L168              Benchmark]: Toolchain (without parser) took 3889.73 ms. Allocated memory was 298.3 MB in the beginning and 706.7 MB in the end (delta: 408.4 MB). Free memory was 258.4 MB in the beginning and 405.0 MB in the end (delta: -146.6 MB). Peak memory consumption was 261.8 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:09,750 INFO  L168              Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 298.3 MB. Free memory is still 264.4 MB. There was no memory consumed. Max. memory is 5.3 GB.
[2018-01-24 16:34:09,750 INFO  L168              Benchmark]: CACSL2BoogieTranslator took 239.48 ms. Allocated memory is still 298.3 MB. Free memory was 257.4 MB in the beginning and 245.1 MB in the end (delta: 12.3 MB). Peak memory consumption was 12.3 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:09,750 INFO  L168              Benchmark]: Boogie Preprocessor took 48.32 ms. Allocated memory is still 298.3 MB. Free memory was 245.1 MB in the beginning and 243.1 MB in the end (delta: 2.0 MB). Peak memory consumption was 2.0 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:09,750 INFO  L168              Benchmark]: RCFGBuilder took 657.49 ms. Allocated memory is still 298.3 MB. Free memory was 243.1 MB in the beginning and 203.0 MB in the end (delta: 40.1 MB). Peak memory consumption was 40.1 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:09,751 INFO  L168              Benchmark]: Abstract Interpretation took 2936.62 ms. Allocated memory was 298.3 MB in the beginning and 706.7 MB in the end (delta: 408.4 MB). Free memory was 203.0 MB in the beginning and 405.0 MB in the end (delta: -202.0 MB). Peak memory consumption was 206.5 MB. Max. memory is 5.3 GB.
[2018-01-24 16:34:09,752 INFO  L344   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.21 ms. Allocated memory is still 298.3 MB. Free memory is still 264.4 MB. There was no memory consumed. Max. memory is 5.3 GB.
 * CACSL2BoogieTranslator took 239.48 ms. Allocated memory is still 298.3 MB. Free memory was 257.4 MB in the beginning and 245.1 MB in the end (delta: 12.3 MB). Peak memory consumption was 12.3 MB. Max. memory is 5.3 GB.
 * Boogie Preprocessor took 48.32 ms. Allocated memory is still 298.3 MB. Free memory was 245.1 MB in the beginning and 243.1 MB in the end (delta: 2.0 MB). Peak memory consumption was 2.0 MB. Max. memory is 5.3 GB.
 * RCFGBuilder took 657.49 ms. Allocated memory is still 298.3 MB. Free memory was 243.1 MB in the beginning and 203.0 MB in the end (delta: 40.1 MB). Peak memory consumption was 40.1 MB. Max. memory is 5.3 GB.
 * Abstract Interpretation took 2936.62 ms. Allocated memory was 298.3 MB in the beginning and 706.7 MB in the end (delta: 408.4 MB). Free memory was 203.0 MB in the beginning and 405.0 MB in the end (delta: -202.0 MB). Peak memory consumption was 206.5 MB. Max. memory is 5.3 GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2:
  - StatisticsResult: ArrayEqualityDomainStatistics
    
#Locations                               :     137 
LocStat_MAX_WEQGRAPH_SIZE                :       0 
LocStat_MAX_SIZEOF_WEQEDGELABEL          :       0 
LocStat_NO_SUPPORTING_EQUALITIES         :    1769 
LocStat_NO_SUPPORTING_DISEQUALITIES      :     681 
LocStat_NO_DISJUNCTIONS                  :    -274 
LocStat_MAX_NO_DISJUNCTIONS              :      -1 
#Transitions                             :     196 
TransStat_MAX_WEQGRAPH_SIZE              :       0 
TransStat_MAX_SIZEOF_WEQEDGELABEL        :       0 
TransStat_NO_SUPPORTING_EQUALITIES       :     271 
TransStat_NO_SUPPORTING_DISEQUALITIES    :      81 
TransStat_NO_DISJUNCTIONS                :     219 
TransStat_MAX_NO_DISJUNCTIONS            :       4 

  - StatisticsResult: EqConstraintFactoryStatistics
    
CONJOIN_DISJUNCTIVE(MILLISECONDS)        : 0.688582 
RENAME_VARIABLES(MILLISECONDS)           : 0.198814 
UNFREEZE(MILLISECONDS)                   : 0.000000 
CONJOIN(MILLISECONDS)                    : 0.355703 
PROJECTAWAY(MILLISECONDS)                : 0.048526 
ADD_WEAK_EQUALITY(MILLISECONDS)          : 0.001627 
DISJOIN(MILLISECONDS)                    : 0.367438 
RENAME_VARIABLES_DISJUNCTIVE(MILLISECONDS) : 0.227254 
ADD_EQUALITY(MILLISECONDS)               : 0.018683 
DISJOIN_DISJUNCTIVE(MILLISECONDS)        : 0.000000 
ADD_DISEQUALITY(MILLISECONDS)            : 0.010402 
#CONJOIN_DISJUNCTIVE                     :    1146 
#RENAME_VARIABLES                        :    2224 
#UNFREEZE                                :       0 
#CONJOIN                                 :    1468 
#PROJECTAWAY                             :    1187 
#ADD_WEAK_EQUALITY                       :     103 
#DISJOIN                                 :     202 
#RENAME_VARIABLES_DISJUNCTIVE            :    2180 
#ADD_EQUALITY                            :     304 
#DISJOIN_DISJUNCTIVE                     :       0 
#ADD_DISEQUALITY                         :      65 

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]               struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]  FCALL        null->next = ((void*)0)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]               struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]  FCALL        null->next = ((void*)0)
[L997]  FCALL        null->prev = ((void*)0)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]               struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]  FCALL        null->next = ((void*)0)
[L997]  FCALL        null->prev = ((void*)0)
[L998]  FCALL        null->colour = BLACK

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  FCALL        end->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND TRUE    __VERIFIER_nondet_int()
[L1018]  FCALL        end->colour = BLACK

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  FCALL        end->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND TRUE    __VERIFIER_nondet_int()
[L1018]  FCALL        end->colour = BLACK
[L1029]  FCALL        end->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND TRUE    RED == end->colour
[L1044]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  EXPR, FCALL  end->next
[L1024]  FCALL        end->next->prev = end

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND TRUE    __VERIFIER_nondet_int()
[L1018]  FCALL        end->colour = BLACK
[L1029]  EXPR, FCALL  end->colour
[L1029]  COND FALSE   !(!(BLACK == end->colour))
[L1029]  COND FALSE   !(0)
[L1030]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  EXPR, FCALL  end->next
[L1024]  FCALL        end->next->prev = end
[L1025]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  FCALL        end->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  EXPR, FCALL  end->next
[L1024]  FCALL        end->next->prev = end
[L1025]  EXPR, FCALL  end->next
[L1025]               end = end->next
[L1026]  FCALL        end->next = null

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  EXPR, FCALL  end->next
[L1024]  FCALL        end->next->prev = end
[L1025]  EXPR, FCALL  end->next
[L1025]               end = end->next
[L1026]  FCALL        end->next = null

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  FCALL        list->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND TRUE    RED == end->colour
[L1044]  EXPR, FCALL  end->next
[L1044]               end = end->next
[L1045]  COND FALSE   !(!(null != end))
[L1045]  COND FALSE   !(0)
[L1046]  FCALL        end->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND TRUE    RED == end->colour
[L1044]  EXPR, FCALL  end->next
[L1044]               end = end->next
[L1045]  COND FALSE   !(!(null != end))
[L1045]  COND FALSE   !(0)
[L1046]  FCALL        end->colour

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  EXPR, FCALL  end->next
[L1024]  FCALL        end->next->prev = end
[L1025]  EXPR, FCALL  end->next
[L1025]               end = end->next
[L1026]  FCALL        end->next = null
[L1027]  FCALL        end->colour = BLACK

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  FCALL        list->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND TRUE    RED == list->colour
[L1057]  FCALL        list->next

  - UnprovableResult [Line: 1]: Unable to prove that free always succeeds
    Unable to prove that free always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  EXPR, FCALL  list->next
[L1064]               end = list->next
[L1065]  FCALL        free(list)
[L1066]               list = end
[L1053]  COND FALSE   !(null != list)
[L1070]  FCALL        free(null)

  - UnprovableResult [Line: 993]: Unable to prove that all allocated memory was freed
    Unable to prove that all allocated memory was freed
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  EXPR, FCALL  list->next
[L1064]               end = list->next
[L1065]  FCALL        free(list)
[L1066]               list = end
[L1053]  COND FALSE   !(null != list)
[L1070]  FCALL        free(null)
[L1072]               return 0;

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND TRUE    RED == list->colour
[L1057]  EXPR, FCALL  list->next
[L1057]               end = list->next
[L1058]  FCALL        free(list)
[L1059]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND TRUE    RED == list->colour
[L1057]  EXPR, FCALL  list->next
[L1057]               end = list->next
[L1058]  FCALL        free(list)
[L1059]  FCALL        end->next

  - UnprovableResult [Line: 1]: Unable to prove that free always succeeds
    Unable to prove that free always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND TRUE    RED == list->colour
[L1057]  EXPR, FCALL  list->next
[L1057]               end = list->next
[L1058]  FCALL        free(list)
[L1059]  EXPR, FCALL  end->next
[L1059]               list = end->next
[L1060]  FCALL        free(end)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  EXPR, FCALL  list->next
[L1064]               end = list->next
[L1065]  FCALL        free(list)
[L1066]               list = end
[L1053]  COND TRUE    null != list
[L1055]  FCALL        list->colour

  - UnprovableResult [Line: 1]: Unable to prove that free always succeeds
    Unable to prove that free always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  EXPR, FCALL  list->next
[L1064]               end = list->next
[L1065]  FCALL        free(list)
[L1066]               list = end
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND TRUE    RED == list->colour
[L1057]  EXPR, FCALL  list->next
[L1057]               end = list->next
[L1058]  FCALL        free(list)

  - UnprovableResult [Line: 1]: Unable to prove that free always succeeds
    Unable to prove that free always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  EXPR, FCALL  end->colour
[L1039]  COND FALSE   !(!(BLACK == end->colour))
[L1039]  COND FALSE   !(0)
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND TRUE    null != end
[L1042]  EXPR, FCALL  end->colour
[L1042]  COND FALSE   !(RED == end->colour)
[L1049]  EXPR, FCALL  end->next
[L1049]               end = end->next
[L1040]  COND FALSE   !(null != end)
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  EXPR, FCALL  list->next
[L1064]               end = list->next
[L1065]  FCALL        free(list)
[L1066]               list = end
[L1053]  COND TRUE    null != list
[L1055]  EXPR, FCALL  list->colour
[L1055]  COND FALSE   !(RED == list->colour)
[L1064]  EXPR, FCALL  list->next
[L1064]               end = list->next
[L1065]  FCALL        free(list)

  - UnprovableResult [Line: 1]: Unable to prove that pointer dereference always succeeds
    Unable to prove that pointer dereference always succeeds
 Reason: abstract domain could reach this error location. 
Possible FailurePath: 
[L995]   EXPR, FCALL  malloc(sizeof(struct TSLL))
[L995]                struct TSLL* null = malloc(sizeof(struct TSLL));
[L996]   FCALL        null->next = ((void*)0)
[L997]   FCALL        null->prev = ((void*)0)
[L998]   FCALL        null->colour = BLACK
[L1000]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1000]               struct TSLL* list = malloc(sizeof(struct TSLL));
[L1001]  FCALL        list->next = null
[L1002]  FCALL        list->prev = null
[L1003]  FCALL        list->colour = BLACK
[L1005]               struct TSLL* end = list;
[L1008]  COND TRUE    __VERIFIER_nondet_int()
[L1011]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1011]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1012]  EXPR, FCALL  end->next
[L1012]  FCALL        end->next->prev = end
[L1013]  EXPR, FCALL  end->next
[L1013]               end = end->next
[L1014]  FCALL        end->next = null
[L1016]  COND FALSE   !(__VERIFIER_nondet_int())
[L1022]  FCALL        end->colour = RED
[L1023]  EXPR, FCALL  malloc(sizeof(struct TSLL))
[L1023]  FCALL        end->next = malloc(sizeof(struct TSLL))
[L1024]  EXPR, FCALL  end->next
[L1024]  FCALL        end->next->prev = end
[L1025]  EXPR, FCALL  end->next
[L1025]               end = end->next
[L1026]  FCALL        end->next = null
[L1027]  FCALL        end->colour = BLACK
[L1029]  EXPR, FCALL  end->colour
[L1029]  COND FALSE   !(!(BLACK == end->colour))
[L1029]  COND FALSE   !(0)
[L1030]  EXPR, FCALL  end->next
[L1030]  COND FALSE   !(!(null == end->next))
[L1030]  COND FALSE   !(0)
[L1031]  COND FALSE   !(!(null != end))
[L1031]  COND FALSE   !(0)
[L1008]  COND FALSE   !(__VERIFIER_nondet_int())
[L1034]               end = null
[L1035]               end = list
[L1038]  COND FALSE   !(!(null != end))
[L1038]  COND FALSE   !(0)
[L1039]  FCALL        end->colour

  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: free always succeeds
    For all program executions holds that free always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: free always succeeds
    For all program executions holds that free always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: free always succeeds
    For all program executions holds that free always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: free always succeeds
    For all program executions holds that free always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
  - PositiveResult [Line: 1]: pointer dereference always succeeds
    For all program executions holds that pointer dereference always succeeds at this location
 * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor:
  - GenericResult: Unfinished Backtranslation
    Generated EnsuresSpecification ensures #valid == old(#valid); is not ensure(true)
RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces
Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/dll-rb-sentinel_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-Benchmark-0-2018-01-24_16-34-09-767.csv
Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/dll-rb-sentinel_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-VPDomainBenchmark-0-2018-01-24_16-34-09-767.csv
Written .csv to /storage/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/dll-rb-sentinel_true-unreach-call_true-valid-memsafety.i_svcomp-DerefFreeMemtrack-32bit-Automizer_Camel+AI_EQ_imprecise.epf_AbstractInterpretationC.xml/Csv-BenchmarkWithCounters-0-2018-01-24_16-34-09-767.csv
Received shutdown request...