java -Xmx6000000000 -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data ./data --generate-csv --csv-dir ../../../releaseScripts/default/UAutomizer-linux/csv -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/cade18-smtinterpol/svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf -i ../../../trunk/examples/svcomp/ldv-memsafety/ArraysOfVariableLength6_true-valid-memsafety_true-termination.c -------------------------------------------------------------------------------- This is Ultimate 0.1.23-666feb3-m [2018-04-10 15:02:51,410 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-04-10 15:02:51,412 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-04-10 15:02:51,425 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-04-10 15:02:51,425 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-04-10 15:02:51,426 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-04-10 15:02:51,427 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-04-10 15:02:51,429 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-04-10 15:02:51,430 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-04-10 15:02:51,431 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-04-10 15:02:51,432 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-04-10 15:02:51,432 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-04-10 15:02:51,433 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-04-10 15:02:51,433 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-04-10 15:02:51,434 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-04-10 15:02:51,436 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-04-10 15:02:51,437 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-04-10 15:02:51,438 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-04-10 15:02:51,439 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-04-10 15:02:51,440 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-04-10 15:02:51,442 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-04-10 15:02:51,442 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-04-10 15:02:51,442 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-04-10 15:02:51,443 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-04-10 15:02:51,444 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-04-10 15:02:51,445 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-04-10 15:02:51,445 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-04-10 15:02:51,445 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-04-10 15:02:51,446 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-04-10 15:02:51,446 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-04-10 15:02:51,447 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-04-10 15:02:51,447 INFO L98 SettingsManager]: Beginning loading settings from /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/cade18-smtinterpol/svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf [2018-04-10 15:02:51,460 INFO L110 SettingsManager]: Loading preferences was successful [2018-04-10 15:02:51,460 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-04-10 15:02:51,461 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-04-10 15:02:51,461 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-04-10 15:02:51,461 INFO L133 SettingsManager]: * Use SBE=true [2018-04-10 15:02:51,462 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * sizeof long=4 [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2018-04-10 15:02:51,462 INFO L133 SettingsManager]: * Bitprecise bitfields=true [2018-04-10 15:02:51,463 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-04-10 15:02:51,463 INFO L133 SettingsManager]: * sizeof long double=12 [2018-04-10 15:02:51,463 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-04-10 15:02:51,463 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-04-10 15:02:51,463 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-04-10 15:02:51,463 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-04-10 15:02:51,463 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-04-10 15:02:51,464 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-04-10 15:02:51,464 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=Craig_TreeInterpolation [2018-04-10 15:02:51,491 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-04-10 15:02:51,500 INFO L266 ainManager$Toolchain]: [Toolchain 1]: Parser(s) successfully (re)initialized [2018-04-10 15:02:51,504 INFO L222 ainManager$Toolchain]: [Toolchain 1]: Toolchain data selected. [2018-04-10 15:02:51,505 INFO L271 PluginConnector]: Initializing CDTParser... [2018-04-10 15:02:51,505 INFO L276 PluginConnector]: CDTParser initialized [2018-04-10 15:02:51,506 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-memsafety/ArraysOfVariableLength6_true-valid-memsafety_true-termination.c [2018-04-10 15:02:51,823 INFO L225 CDTParser]: Created temporary CDT project at /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/data/FLAG46db7d5dd [2018-04-10 15:02:51,914 INFO L287 CDTParser]: IsIndexed: true [2018-04-10 15:02:51,914 INFO L288 CDTParser]: Found 1 translation units. [2018-04-10 15:02:51,915 INFO L168 CDTParser]: Scanning ArraysOfVariableLength6_true-valid-memsafety_true-termination.c [2018-04-10 15:02:51,916 INFO L210 ultiparseSymbolTable]: Include resolver: [2018-04-10 15:02:51,916 INFO L215 ultiparseSymbolTable]: [2018-04-10 15:02:51,916 INFO L218 ultiparseSymbolTable]: Function table: [2018-04-10 15:02:51,916 INFO L221 ultiparseSymbolTable]: Function definition of null ('main') in ArraysOfVariableLength6_true-valid-memsafety_true-termination.c [2018-04-10 15:02:51,916 INFO L221 ultiparseSymbolTable]: Function definition of __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo ('foo') in ArraysOfVariableLength6_true-valid-memsafety_true-termination.c [2018-04-10 15:02:51,916 INFO L227 ultiparseSymbolTable]: Global variable table: [2018-04-10 15:02:51,916 INFO L233 ultiparseSymbolTable]: [2018-04-10 15:02:51,928 INFO L330 CDTParser]: Deleted temporary CDT project at /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/data/FLAG46db7d5dd [2018-04-10 15:02:51,931 INFO L304 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-04-10 15:02:51,932 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2018-04-10 15:02:51,933 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-04-10 15:02:51,933 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-04-10 15:02:51,939 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-04-10 15:02:51,940 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.04 03:02:51" (1/1) ... [2018-04-10 15:02:51,943 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@45352a4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:51, skipping insertion in model container [2018-04-10 15:02:51,943 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.04 03:02:51" (1/1) ... [2018-04-10 15:02:51,958 INFO L167 Dispatcher]: Using SV-COMP mode [2018-04-10 15:02:51,969 INFO L167 Dispatcher]: Using SV-COMP mode [2018-04-10 15:02:52,069 INFO L175 PostProcessor]: Settings: Checked method=main [2018-04-10 15:02:52,086 INFO L175 PostProcessor]: Settings: Checked method=main [2018-04-10 15:02:52,090 INFO L100 SccComputation]: Graph consists of 0 InCaSumBalls and 9 non ball SCCs. Number of states in SCCs 9. [2018-04-10 15:02:52,095 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52 WrapperNode [2018-04-10 15:02:52,095 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-04-10 15:02:52,096 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-04-10 15:02:52,096 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-04-10 15:02:52,096 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-04-10 15:02:52,104 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,104 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,111 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,112 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,114 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,118 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,119 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... [2018-04-10 15:02:52,121 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-04-10 15:02:52,121 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-04-10 15:02:52,121 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-04-10 15:02:52,121 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-04-10 15:02:52,122 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (1/1) ... No working directory specified, using /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-04-10 15:02:52,161 INFO L136 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-04-10 15:02:52,161 INFO L136 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-04-10 15:02:52,162 INFO L136 BoogieDeclarations]: Found implementation of procedure __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo [2018-04-10 15:02:52,162 INFO L136 BoogieDeclarations]: Found implementation of procedure main [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure read~int [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure main [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2018-04-10 15:02:52,162 INFO L128 BoogieDeclarations]: Found specification of procedure write~int [2018-04-10 15:02:52,360 INFO L259 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-04-10 15:02:52,361 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.04 03:02:52 BoogieIcfgContainer [2018-04-10 15:02:52,361 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-04-10 15:02:52,362 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-04-10 15:02:52,362 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-04-10 15:02:52,365 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-04-10 15:02:52,365 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.04 03:02:51" (1/3) ... [2018-04-10 15:02:52,366 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a003f6f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.04 03:02:52, skipping insertion in model container [2018-04-10 15:02:52,366 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.04 03:02:52" (2/3) ... [2018-04-10 15:02:52,367 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a003f6f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.04 03:02:52, skipping insertion in model container [2018-04-10 15:02:52,367 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.04 03:02:52" (3/3) ... [2018-04-10 15:02:52,369 INFO L107 eAbstractionObserver]: Analyzing ICFG ArraysOfVariableLength6_true-valid-memsafety_true-termination.c [2018-04-10 15:02:52,378 INFO L131 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:Craig_TreeInterpolation Determinization: PREDICATE_ABSTRACTION [2018-04-10 15:02:52,384 INFO L143 ceAbstractionStarter]: Appying trace abstraction to program that has 6 error locations. [2018-04-10 15:02:52,415 INFO L128 ementStrategyFactory]: Using default assertion order modulation [2018-04-10 15:02:52,416 INFO L369 AbstractCegarLoop]: Interprodecural is true [2018-04-10 15:02:52,416 INFO L370 AbstractCegarLoop]: Hoare is false [2018-04-10 15:02:52,416 INFO L371 AbstractCegarLoop]: Compute interpolants for Craig_TreeInterpolation [2018-04-10 15:02:52,416 INFO L372 AbstractCegarLoop]: Backedges is CANONICAL [2018-04-10 15:02:52,416 INFO L373 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-04-10 15:02:52,417 INFO L374 AbstractCegarLoop]: Difference is false [2018-04-10 15:02:52,417 INFO L375 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-04-10 15:02:52,417 INFO L380 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-04-10 15:02:52,417 INFO L87 2NestedWordAutomaton]: Mode: main mode - execution starts in main procedure [2018-04-10 15:02:52,429 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states. [2018-04-10 15:02:52,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2018-04-10 15:02:52,436 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:52,436 INFO L355 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:52,436 INFO L408 AbstractCegarLoop]: === Iteration 1 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:52,439 INFO L82 PathProgramCache]: Analyzing trace with hash -215054890, now seen corresponding path program 1 times [2018-04-10 15:02:52,476 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:52,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:52,508 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:52,557 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,559 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-10 15:02:52,559 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2018-04-10 15:02:52,560 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:52,561 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,561 INFO L182 omatonBuilderFactory]: Interpolants [49#true, 50#false, 51#(= main_~i~1 0)] [2018-04-10 15:02:52,561 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,562 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-04-10 15:02:52,571 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-04-10 15:02:52,572 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-04-10 15:02:52,573 INFO L87 Difference]: Start difference. First operand 46 states. Second operand 3 states. [2018-04-10 15:02:52,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:52,621 INFO L93 Difference]: Finished difference Result 63 states and 68 transitions. [2018-04-10 15:02:52,621 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-04-10 15:02:52,622 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 11 [2018-04-10 15:02:52,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:52,628 INFO L225 Difference]: With dead ends: 63 [2018-04-10 15:02:52,628 INFO L226 Difference]: Without dead ends: 59 [2018-04-10 15:02:52,630 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-04-10 15:02:52,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2018-04-10 15:02:52,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 49. [2018-04-10 15:02:52,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2018-04-10 15:02:52,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 52 transitions. [2018-04-10 15:02:52,653 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 52 transitions. Word has length 11 [2018-04-10 15:02:52,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:52,654 INFO L459 AbstractCegarLoop]: Abstraction has 49 states and 52 transitions. [2018-04-10 15:02:52,654 INFO L460 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-04-10 15:02:52,654 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 52 transitions. [2018-04-10 15:02:52,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2018-04-10 15:02:52,654 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:52,654 INFO L355 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:52,654 INFO L408 AbstractCegarLoop]: === Iteration 2 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:52,654 INFO L82 PathProgramCache]: Analyzing trace with hash 1100032001, now seen corresponding path program 1 times [2018-04-10 15:02:52,655 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:52,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:52,668 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:52,721 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,721 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-10 15:02:52,721 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-04-10 15:02:52,721 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:52,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,722 INFO L182 omatonBuilderFactory]: Interpolants [164#true, 165#false, 166#(= 32 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size|), 167#(and (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 168#(= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)] [2018-04-10 15:02:52,722 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,724 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-10 15:02:52,724 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-10 15:02:52,724 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2018-04-10 15:02:52,724 INFO L87 Difference]: Start difference. First operand 49 states and 52 transitions. Second operand 5 states. [2018-04-10 15:02:52,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:52,781 INFO L93 Difference]: Finished difference Result 57 states and 60 transitions. [2018-04-10 15:02:52,781 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-04-10 15:02:52,781 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 16 [2018-04-10 15:02:52,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:52,782 INFO L225 Difference]: With dead ends: 57 [2018-04-10 15:02:52,782 INFO L226 Difference]: Without dead ends: 57 [2018-04-10 15:02:52,783 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2018-04-10 15:02:52,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2018-04-10 15:02:52,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 52. [2018-04-10 15:02:52,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 52 states. [2018-04-10 15:02:52,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 55 transitions. [2018-04-10 15:02:52,788 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 55 transitions. Word has length 16 [2018-04-10 15:02:52,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:52,789 INFO L459 AbstractCegarLoop]: Abstraction has 52 states and 55 transitions. [2018-04-10 15:02:52,789 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-10 15:02:52,789 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 55 transitions. [2018-04-10 15:02:52,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2018-04-10 15:02:52,789 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:52,790 INFO L355 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:52,790 INFO L408 AbstractCegarLoop]: === Iteration 3 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:52,790 INFO L82 PathProgramCache]: Analyzing trace with hash -258746290, now seen corresponding path program 1 times [2018-04-10 15:02:52,791 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:52,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:52,800 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:52,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,869 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-10 15:02:52,869 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-04-10 15:02:52,869 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:52,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,869 INFO L182 omatonBuilderFactory]: Interpolants [280#true, 281#false, 282#(and (= 32 (select |#length| |main_~#mask~0.base|)) (= 0 |main_~#mask~0.offset|)), 283#(and (= 32 (select |#length| main_~c~0.base)) (= 0 main_~c~0.offset)), 284#(and (= 32 (select |#length| |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~b.base|)) (= 0 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~b.offset|)), 285#(and (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~b.offset 0) (= 32 (select |#length| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~b.base))), 286#(and (<= 0 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0) (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 31) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~b.offset 0) (= 32 (select |#length| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~b.base)))] [2018-04-10 15:02:52,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:52,870 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-10 15:02:52,870 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-10 15:02:52,870 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2018-04-10 15:02:52,870 INFO L87 Difference]: Start difference. First operand 52 states and 55 transitions. Second operand 7 states. [2018-04-10 15:02:52,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:52,956 INFO L93 Difference]: Finished difference Result 51 states and 54 transitions. [2018-04-10 15:02:52,957 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-04-10 15:02:52,957 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 17 [2018-04-10 15:02:52,957 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:52,958 INFO L225 Difference]: With dead ends: 51 [2018-04-10 15:02:52,958 INFO L226 Difference]: Without dead ends: 51 [2018-04-10 15:02:52,958 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2018-04-10 15:02:52,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2018-04-10 15:02:52,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2018-04-10 15:02:52,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 51 states. [2018-04-10 15:02:52,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 54 transitions. [2018-04-10 15:02:52,963 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 54 transitions. Word has length 17 [2018-04-10 15:02:52,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:52,963 INFO L459 AbstractCegarLoop]: Abstraction has 51 states and 54 transitions. [2018-04-10 15:02:52,963 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-10 15:02:52,963 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 54 transitions. [2018-04-10 15:02:52,964 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2018-04-10 15:02:52,964 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:52,964 INFO L355 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:52,964 INFO L408 AbstractCegarLoop]: === Iteration 4 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:52,964 INFO L82 PathProgramCache]: Analyzing trace with hash -258746291, now seen corresponding path program 1 times [2018-04-10 15:02:52,965 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:52,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:52,974 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,004 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-10 15:02:53,004 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-04-10 15:02:53,004 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,004 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,004 INFO L182 omatonBuilderFactory]: Interpolants [400#(= 1 (select |#valid| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~b.base)), 395#true, 396#false, 397#(= 1 (select |#valid| |main_~#mask~0.base|)), 398#(= 1 (select |#valid| main_~c~0.base)), 399#(= 1 (select |#valid| |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~b.base|))] [2018-04-10 15:02:53,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,005 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-04-10 15:02:53,005 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-04-10 15:02:53,005 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-04-10 15:02:53,005 INFO L87 Difference]: Start difference. First operand 51 states and 54 transitions. Second operand 6 states. [2018-04-10 15:02:53,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,060 INFO L93 Difference]: Finished difference Result 50 states and 53 transitions. [2018-04-10 15:02:53,060 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-10 15:02:53,061 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 17 [2018-04-10 15:02:53,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,061 INFO L225 Difference]: With dead ends: 50 [2018-04-10 15:02:53,061 INFO L226 Difference]: Without dead ends: 50 [2018-04-10 15:02:53,061 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-04-10 15:02:53,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2018-04-10 15:02:53,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50. [2018-04-10 15:02:53,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 50 states. [2018-04-10 15:02:53,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 53 transitions. [2018-04-10 15:02:53,064 INFO L78 Accepts]: Start accepts. Automaton has 50 states and 53 transitions. Word has length 17 [2018-04-10 15:02:53,064 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,064 INFO L459 AbstractCegarLoop]: Abstraction has 50 states and 53 transitions. [2018-04-10 15:02:53,064 INFO L460 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-04-10 15:02:53,064 INFO L276 IsEmpty]: Start isEmpty. Operand 50 states and 53 transitions. [2018-04-10 15:02:53,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2018-04-10 15:02:53,064 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,065 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,065 INFO L408 AbstractCegarLoop]: === Iteration 5 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,065 INFO L82 PathProgramCache]: Analyzing trace with hash -1933852231, now seen corresponding path program 1 times [2018-04-10 15:02:53,065 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,077 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,138 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,138 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:53,138 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6] total 6 [2018-04-10 15:02:53,138 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,138 INFO L182 omatonBuilderFactory]: Interpolants [505#true, 506#false, 507#(= 32 |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size|), 508#(= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32), 509#(and (<= 0 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)), 510#(and (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (<= 1 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0)), 511#(and (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 31) (<= 1 __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0))] [2018-04-10 15:02:53,138 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,139 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-10 15:02:53,139 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-10 15:02:53,139 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2018-04-10 15:02:53,139 INFO L87 Difference]: Start difference. First operand 50 states and 53 transitions. Second operand 7 states. [2018-04-10 15:02:53,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,185 INFO L93 Difference]: Finished difference Result 52 states and 55 transitions. [2018-04-10 15:02:53,185 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-10 15:02:53,185 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 22 [2018-04-10 15:02:53,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,186 INFO L225 Difference]: With dead ends: 52 [2018-04-10 15:02:53,186 INFO L226 Difference]: Without dead ends: 52 [2018-04-10 15:02:53,186 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=55, Unknown=0, NotChecked=0, Total=90 [2018-04-10 15:02:53,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2018-04-10 15:02:53,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 48. [2018-04-10 15:02:53,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 48 states. [2018-04-10 15:02:53,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 51 transitions. [2018-04-10 15:02:53,190 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 51 transitions. Word has length 22 [2018-04-10 15:02:53,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,191 INFO L459 AbstractCegarLoop]: Abstraction has 48 states and 51 transitions. [2018-04-10 15:02:53,191 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-10 15:02:53,191 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 51 transitions. [2018-04-10 15:02:53,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2018-04-10 15:02:53,191 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,192 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,192 INFO L408 AbstractCegarLoop]: === Iteration 6 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,192 INFO L82 PathProgramCache]: Analyzing trace with hash 1693854175, now seen corresponding path program 1 times [2018-04-10 15:02:53,193 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,204 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,243 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-10 15:02:53,243 INFO L320 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-04-10 15:02:53,243 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-04-10 15:02:53,243 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,244 INFO L182 omatonBuilderFactory]: Interpolants [618#true, 619#false, 620#(<= 0 main_~i~1), 621#(<= 1 main_~i~1), 622#(and (<= main_~i~1 31) (<= 1 main_~i~1))] [2018-04-10 15:02:53,244 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-10 15:02:53,244 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-10 15:02:53,244 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-10 15:02:53,245 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-10 15:02:53,245 INFO L87 Difference]: Start difference. First operand 48 states and 51 transitions. Second operand 5 states. [2018-04-10 15:02:53,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,279 INFO L93 Difference]: Finished difference Result 58 states and 61 transitions. [2018-04-10 15:02:53,279 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-10 15:02:53,279 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 29 [2018-04-10 15:02:53,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,280 INFO L225 Difference]: With dead ends: 58 [2018-04-10 15:02:53,280 INFO L226 Difference]: Without dead ends: 58 [2018-04-10 15:02:53,280 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-10 15:02:53,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2018-04-10 15:02:53,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 44. [2018-04-10 15:02:53,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 44 states. [2018-04-10 15:02:53,284 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 47 transitions. [2018-04-10 15:02:53,284 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 47 transitions. Word has length 29 [2018-04-10 15:02:53,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,285 INFO L459 AbstractCegarLoop]: Abstraction has 44 states and 47 transitions. [2018-04-10 15:02:53,285 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-10 15:02:53,285 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 47 transitions. [2018-04-10 15:02:53,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-04-10 15:02:53,287 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,287 INFO L355 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,287 INFO L408 AbstractCegarLoop]: === Iteration 7 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,288 INFO L82 PathProgramCache]: Analyzing trace with hash 1643098334, now seen corresponding path program 1 times [2018-04-10 15:02:53,288 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,299 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,324 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-10 15:02:53,324 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:53,324 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [4] total 4 [2018-04-10 15:02:53,324 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,325 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-04-10 15:02:53,325 INFO L182 omatonBuilderFactory]: Interpolants [725#true, 726#false, 727#(= main_~i~1 0), 728#(<= main_~i~1 1)] [2018-04-10 15:02:53,325 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-04-10 15:02:53,325 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-04-10 15:02:53,325 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-04-10 15:02:53,326 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-04-10 15:02:53,326 INFO L87 Difference]: Start difference. First operand 44 states and 47 transitions. Second operand 4 states. [2018-04-10 15:02:53,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,355 INFO L93 Difference]: Finished difference Result 72 states and 77 transitions. [2018-04-10 15:02:53,355 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-04-10 15:02:53,355 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 37 [2018-04-10 15:02:53,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,355 INFO L225 Difference]: With dead ends: 72 [2018-04-10 15:02:53,356 INFO L226 Difference]: Without dead ends: 72 [2018-04-10 15:02:53,356 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-04-10 15:02:53,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2018-04-10 15:02:53,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 55. [2018-04-10 15:02:53,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2018-04-10 15:02:53,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 60 transitions. [2018-04-10 15:02:53,359 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 60 transitions. Word has length 37 [2018-04-10 15:02:53,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,359 INFO L459 AbstractCegarLoop]: Abstraction has 55 states and 60 transitions. [2018-04-10 15:02:53,359 INFO L460 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-04-10 15:02:53,359 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 60 transitions. [2018-04-10 15:02:53,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2018-04-10 15:02:53,360 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,361 INFO L355 BasicCegarLoop]: trace histogram [4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,361 INFO L408 AbstractCegarLoop]: === Iteration 8 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,361 INFO L82 PathProgramCache]: Analyzing trace with hash -1953764441, now seen corresponding path program 2 times [2018-04-10 15:02:53,361 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,377 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,465 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 17 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-04-10 15:02:53,465 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:53,466 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [5] total 5 [2018-04-10 15:02:53,466 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,466 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-04-10 15:02:53,466 INFO L182 omatonBuilderFactory]: Interpolants [856#true, 857#false, 858#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 859#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 860#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:02:53,466 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 17 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2018-04-10 15:02:53,466 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-10 15:02:53,467 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-10 15:02:53,467 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2018-04-10 15:02:53,467 INFO L87 Difference]: Start difference. First operand 55 states and 60 transitions. Second operand 5 states. [2018-04-10 15:02:53,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,498 INFO L93 Difference]: Finished difference Result 68 states and 73 transitions. [2018-04-10 15:02:53,498 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-10 15:02:53,498 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2018-04-10 15:02:53,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,499 INFO L225 Difference]: With dead ends: 68 [2018-04-10 15:02:53,499 INFO L226 Difference]: Without dead ends: 65 [2018-04-10 15:02:53,499 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-04-10 15:02:53,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2018-04-10 15:02:53,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 61. [2018-04-10 15:02:53,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61 states. [2018-04-10 15:02:53,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 66 transitions. [2018-04-10 15:02:53,502 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 66 transitions. Word has length 55 [2018-04-10 15:02:53,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,503 INFO L459 AbstractCegarLoop]: Abstraction has 61 states and 66 transitions. [2018-04-10 15:02:53,503 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-10 15:02:53,503 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 66 transitions. [2018-04-10 15:02:53,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-04-10 15:02:53,504 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,504 INFO L355 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,504 INFO L408 AbstractCegarLoop]: === Iteration 9 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,505 INFO L82 PathProgramCache]: Analyzing trace with hash -81663113, now seen corresponding path program 3 times [2018-04-10 15:02:53,505 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,523 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,574 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2018-04-10 15:02:53,575 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:53,575 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [5] total 5 [2018-04-10 15:02:53,575 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,575 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2018-04-10 15:02:53,575 INFO L182 omatonBuilderFactory]: Interpolants [992#true, 993#false, 994#(= main_~i~1 0), 995#(<= main_~i~1 1), 996#(<= main_~i~1 2)] [2018-04-10 15:02:53,576 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2018-04-10 15:02:53,576 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-04-10 15:02:53,576 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-04-10 15:02:53,576 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-10 15:02:53,576 INFO L87 Difference]: Start difference. First operand 61 states and 66 transitions. Second operand 5 states. [2018-04-10 15:02:53,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,626 INFO L93 Difference]: Finished difference Result 94 states and 100 transitions. [2018-04-10 15:02:53,627 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-04-10 15:02:53,627 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 67 [2018-04-10 15:02:53,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,628 INFO L225 Difference]: With dead ends: 94 [2018-04-10 15:02:53,628 INFO L226 Difference]: Without dead ends: 94 [2018-04-10 15:02:53,628 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2018-04-10 15:02:53,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2018-04-10 15:02:53,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 72. [2018-04-10 15:02:53,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 72 states. [2018-04-10 15:02:53,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 79 transitions. [2018-04-10 15:02:53,634 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 79 transitions. Word has length 67 [2018-04-10 15:02:53,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,634 INFO L459 AbstractCegarLoop]: Abstraction has 72 states and 79 transitions. [2018-04-10 15:02:53,634 INFO L460 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-04-10 15:02:53,634 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 79 transitions. [2018-04-10 15:02:53,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2018-04-10 15:02:53,636 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,636 INFO L355 BasicCegarLoop]: trace histogram [9, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,636 INFO L408 AbstractCegarLoop]: === Iteration 10 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,636 INFO L82 PathProgramCache]: Analyzing trace with hash -33793592, now seen corresponding path program 4 times [2018-04-10 15:02:53,637 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,657 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,774 INFO L134 CoverageAnalysis]: Checked inductivity of 168 backedges. 10 proven. 84 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2018-04-10 15:02:53,775 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:53,775 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6] total 6 [2018-04-10 15:02:53,775 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,775 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2018-04-10 15:02:53,776 INFO L182 omatonBuilderFactory]: Interpolants [1168#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 1163#true, 1164#false, 1165#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 1166#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 1167#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))))] [2018-04-10 15:02:53,776 INFO L134 CoverageAnalysis]: Checked inductivity of 168 backedges. 10 proven. 84 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2018-04-10 15:02:53,776 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-04-10 15:02:53,776 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-04-10 15:02:53,776 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2018-04-10 15:02:53,777 INFO L87 Difference]: Start difference. First operand 72 states and 79 transitions. Second operand 6 states. [2018-04-10 15:02:53,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:53,825 INFO L93 Difference]: Finished difference Result 85 states and 92 transitions. [2018-04-10 15:02:53,828 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-10 15:02:53,828 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 91 [2018-04-10 15:02:53,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:53,829 INFO L225 Difference]: With dead ends: 85 [2018-04-10 15:02:53,829 INFO L226 Difference]: Without dead ends: 82 [2018-04-10 15:02:53,829 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2018-04-10 15:02:53,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2018-04-10 15:02:53,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 78. [2018-04-10 15:02:53,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 78 states. [2018-04-10 15:02:53,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 85 transitions. [2018-04-10 15:02:53,834 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 85 transitions. Word has length 91 [2018-04-10 15:02:53,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:53,834 INFO L459 AbstractCegarLoop]: Abstraction has 78 states and 85 transitions. [2018-04-10 15:02:53,834 INFO L460 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-04-10 15:02:53,834 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 85 transitions. [2018-04-10 15:02:53,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-04-10 15:02:53,838 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:53,838 INFO L355 BasicCegarLoop]: trace histogram [12, 9, 9, 9, 9, 9, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:53,838 INFO L408 AbstractCegarLoop]: === Iteration 11 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:53,838 INFO L82 PathProgramCache]: Analyzing trace with hash -913746080, now seen corresponding path program 5 times [2018-04-10 15:02:53,839 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:53,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:53,878 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:53,932 INFO L134 CoverageAnalysis]: Checked inductivity of 312 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 288 trivial. 0 not checked. [2018-04-10 15:02:53,933 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:53,933 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [6] total 6 [2018-04-10 15:02:53,933 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:53,933 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2018-04-10 15:02:53,934 INFO L182 omatonBuilderFactory]: Interpolants [1334#true, 1335#false, 1336#(= main_~i~1 0), 1337#(<= main_~i~1 1), 1338#(<= main_~i~1 2), 1339#(<= main_~i~1 3)] [2018-04-10 15:02:53,934 INFO L134 CoverageAnalysis]: Checked inductivity of 312 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 288 trivial. 0 not checked. [2018-04-10 15:02:53,934 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-04-10 15:02:53,934 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-04-10 15:02:53,934 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=15, Unknown=0, NotChecked=0, Total=30 [2018-04-10 15:02:53,935 INFO L87 Difference]: Start difference. First operand 78 states and 85 transitions. Second operand 6 states. [2018-04-10 15:02:54,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:54,016 INFO L93 Difference]: Finished difference Result 116 states and 123 transitions. [2018-04-10 15:02:54,016 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-04-10 15:02:54,016 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 109 [2018-04-10 15:02:54,017 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:54,018 INFO L225 Difference]: With dead ends: 116 [2018-04-10 15:02:54,018 INFO L226 Difference]: Without dead ends: 116 [2018-04-10 15:02:54,018 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=15, Unknown=0, NotChecked=0, Total=30 [2018-04-10 15:02:54,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2018-04-10 15:02:54,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 89. [2018-04-10 15:02:54,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89 states. [2018-04-10 15:02:54,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 98 transitions. [2018-04-10 15:02:54,023 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 98 transitions. Word has length 109 [2018-04-10 15:02:54,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:54,023 INFO L459 AbstractCegarLoop]: Abstraction has 89 states and 98 transitions. [2018-04-10 15:02:54,023 INFO L460 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-04-10 15:02:54,023 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 98 transitions. [2018-04-10 15:02:54,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2018-04-10 15:02:54,025 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:54,025 INFO L355 BasicCegarLoop]: trace histogram [16, 12, 12, 12, 12, 12, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:54,025 INFO L408 AbstractCegarLoop]: === Iteration 12 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:54,025 INFO L82 PathProgramCache]: Analyzing trace with hash 969284025, now seen corresponding path program 6 times [2018-04-10 15:02:54,026 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:54,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:54,050 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:54,213 INFO L134 CoverageAnalysis]: Checked inductivity of 572 backedges. 14 proven. 237 refuted. 0 times theorem prover too weak. 321 trivial. 0 not checked. [2018-04-10 15:02:54,214 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:54,214 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7] total 7 [2018-04-10 15:02:54,214 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:54,214 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 0 proven. 69 refuted. 0 times theorem prover too weak. 75 trivial. 0 not checked. [2018-04-10 15:02:54,215 INFO L182 omatonBuilderFactory]: Interpolants [1545#true, 1546#false, 1547#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 1548#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 1549#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 1550#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 1551#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:02:54,215 INFO L134 CoverageAnalysis]: Checked inductivity of 572 backedges. 14 proven. 237 refuted. 0 times theorem prover too weak. 321 trivial. 0 not checked. [2018-04-10 15:02:54,215 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-10 15:02:54,215 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-10 15:02:54,216 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2018-04-10 15:02:54,216 INFO L87 Difference]: Start difference. First operand 89 states and 98 transitions. Second operand 7 states. [2018-04-10 15:02:54,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:54,277 INFO L93 Difference]: Finished difference Result 102 states and 111 transitions. [2018-04-10 15:02:54,278 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-04-10 15:02:54,278 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 139 [2018-04-10 15:02:54,278 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:54,279 INFO L225 Difference]: With dead ends: 102 [2018-04-10 15:02:54,280 INFO L226 Difference]: Without dead ends: 99 [2018-04-10 15:02:54,280 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2018-04-10 15:02:54,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2018-04-10 15:02:54,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 95. [2018-04-10 15:02:54,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 95 states. [2018-04-10 15:02:54,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 104 transitions. [2018-04-10 15:02:54,285 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 104 transitions. Word has length 139 [2018-04-10 15:02:54,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:54,285 INFO L459 AbstractCegarLoop]: Abstraction has 95 states and 104 transitions. [2018-04-10 15:02:54,285 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-10 15:02:54,285 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 104 transitions. [2018-04-10 15:02:54,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 164 [2018-04-10 15:02:54,287 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:54,287 INFO L355 BasicCegarLoop]: trace histogram [20, 16, 16, 16, 16, 16, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:54,288 INFO L408 AbstractCegarLoop]: === Iteration 13 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:54,288 INFO L82 PathProgramCache]: Analyzing trace with hash -1862037927, now seen corresponding path program 7 times [2018-04-10 15:02:54,288 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:54,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:54,309 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:54,387 INFO L134 CoverageAnalysis]: Checked inductivity of 928 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 884 trivial. 0 not checked. [2018-04-10 15:02:54,387 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:54,388 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [7] total 7 [2018-04-10 15:02:54,388 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:54,388 INFO L134 CoverageAnalysis]: Checked inductivity of 180 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 180 trivial. 0 not checked. [2018-04-10 15:02:54,389 INFO L182 omatonBuilderFactory]: Interpolants [1751#true, 1752#false, 1753#(= main_~i~1 0), 1754#(<= main_~i~1 1), 1755#(<= main_~i~1 2), 1756#(<= main_~i~1 3), 1757#(<= main_~i~1 4)] [2018-04-10 15:02:54,389 INFO L134 CoverageAnalysis]: Checked inductivity of 928 backedges. 0 proven. 44 refuted. 0 times theorem prover too weak. 884 trivial. 0 not checked. [2018-04-10 15:02:54,389 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-04-10 15:02:54,389 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-04-10 15:02:54,390 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2018-04-10 15:02:54,390 INFO L87 Difference]: Start difference. First operand 95 states and 104 transitions. Second operand 7 states. [2018-04-10 15:02:54,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:54,448 INFO L93 Difference]: Finished difference Result 138 states and 146 transitions. [2018-04-10 15:02:54,448 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-04-10 15:02:54,448 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 163 [2018-04-10 15:02:54,449 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:54,449 INFO L225 Difference]: With dead ends: 138 [2018-04-10 15:02:54,449 INFO L226 Difference]: Without dead ends: 138 [2018-04-10 15:02:54,450 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=21, Unknown=0, NotChecked=0, Total=42 [2018-04-10 15:02:54,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 138 states. [2018-04-10 15:02:54,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 138 to 106. [2018-04-10 15:02:54,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106 states. [2018-04-10 15:02:54,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 117 transitions. [2018-04-10 15:02:54,454 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 117 transitions. Word has length 163 [2018-04-10 15:02:54,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:54,454 INFO L459 AbstractCegarLoop]: Abstraction has 106 states and 117 transitions. [2018-04-10 15:02:54,455 INFO L460 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-04-10 15:02:54,455 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 117 transitions. [2018-04-10 15:02:54,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 200 [2018-04-10 15:02:54,457 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:54,457 INFO L355 BasicCegarLoop]: trace histogram [25, 20, 20, 20, 20, 20, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:54,457 INFO L408 AbstractCegarLoop]: === Iteration 14 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:54,458 INFO L82 PathProgramCache]: Analyzing trace with hash -1319247558, now seen corresponding path program 8 times [2018-04-10 15:02:54,458 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:54,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:54,485 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:54,716 INFO L134 CoverageAnalysis]: Checked inductivity of 1470 backedges. 18 proven. 512 refuted. 0 times theorem prover too weak. 940 trivial. 0 not checked. [2018-04-10 15:02:54,716 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:54,717 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-10 15:02:54,717 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:54,717 INFO L134 CoverageAnalysis]: Checked inductivity of 300 backedges. 0 proven. 116 refuted. 0 times theorem prover too weak. 184 trivial. 0 not checked. [2018-04-10 15:02:54,717 INFO L182 omatonBuilderFactory]: Interpolants [2002#true, 2003#false, 2004#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 2005#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2006#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2007#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2008#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2009#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:02:54,718 INFO L134 CoverageAnalysis]: Checked inductivity of 1470 backedges. 18 proven. 512 refuted. 0 times theorem prover too weak. 940 trivial. 0 not checked. [2018-04-10 15:02:54,718 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-10 15:02:54,718 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-10 15:02:54,719 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2018-04-10 15:02:54,719 INFO L87 Difference]: Start difference. First operand 106 states and 117 transitions. Second operand 8 states. [2018-04-10 15:02:54,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:54,787 INFO L93 Difference]: Finished difference Result 119 states and 130 transitions. [2018-04-10 15:02:54,788 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-04-10 15:02:54,788 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 199 [2018-04-10 15:02:54,788 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:54,789 INFO L225 Difference]: With dead ends: 119 [2018-04-10 15:02:54,789 INFO L226 Difference]: Without dead ends: 116 [2018-04-10 15:02:54,789 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2018-04-10 15:02:54,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2018-04-10 15:02:54,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 112. [2018-04-10 15:02:54,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 112 states. [2018-04-10 15:02:54,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 123 transitions. [2018-04-10 15:02:54,794 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 123 transitions. Word has length 199 [2018-04-10 15:02:54,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:54,794 INFO L459 AbstractCegarLoop]: Abstraction has 112 states and 123 transitions. [2018-04-10 15:02:54,794 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-10 15:02:54,794 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 123 transitions. [2018-04-10 15:02:54,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 230 [2018-04-10 15:02:54,797 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:54,798 INFO L355 BasicCegarLoop]: trace histogram [30, 25, 25, 25, 25, 25, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:54,798 INFO L408 AbstractCegarLoop]: === Iteration 15 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:54,798 INFO L82 PathProgramCache]: Analyzing trace with hash 125993506, now seen corresponding path program 9 times [2018-04-10 15:02:54,799 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:54,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:54,829 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:54,943 INFO L134 CoverageAnalysis]: Checked inductivity of 2180 backedges. 0 proven. 70 refuted. 0 times theorem prover too weak. 2110 trivial. 0 not checked. [2018-04-10 15:02:54,943 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:54,943 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8] total 8 [2018-04-10 15:02:54,943 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:54,944 INFO L134 CoverageAnalysis]: Checked inductivity of 360 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 360 trivial. 0 not checked. [2018-04-10 15:02:54,944 INFO L182 omatonBuilderFactory]: Interpolants [2243#true, 2244#false, 2245#(= main_~i~1 0), 2246#(<= main_~i~1 1), 2247#(<= main_~i~1 2), 2248#(<= main_~i~1 3), 2249#(<= main_~i~1 4), 2250#(<= main_~i~1 5)] [2018-04-10 15:02:54,945 INFO L134 CoverageAnalysis]: Checked inductivity of 2180 backedges. 0 proven. 70 refuted. 0 times theorem prover too weak. 2110 trivial. 0 not checked. [2018-04-10 15:02:54,945 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2018-04-10 15:02:54,945 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-04-10 15:02:54,945 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=28, Unknown=0, NotChecked=0, Total=56 [2018-04-10 15:02:54,945 INFO L87 Difference]: Start difference. First operand 112 states and 123 transitions. Second operand 8 states. [2018-04-10 15:02:55,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:55,022 INFO L93 Difference]: Finished difference Result 160 states and 169 transitions. [2018-04-10 15:02:55,022 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-04-10 15:02:55,022 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 229 [2018-04-10 15:02:55,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:55,023 INFO L225 Difference]: With dead ends: 160 [2018-04-10 15:02:55,024 INFO L226 Difference]: Without dead ends: 160 [2018-04-10 15:02:55,024 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=28, Unknown=0, NotChecked=0, Total=56 [2018-04-10 15:02:55,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2018-04-10 15:02:55,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 123. [2018-04-10 15:02:55,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 123 states. [2018-04-10 15:02:55,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 136 transitions. [2018-04-10 15:02:55,028 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 136 transitions. Word has length 229 [2018-04-10 15:02:55,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:55,028 INFO L459 AbstractCegarLoop]: Abstraction has 123 states and 136 transitions. [2018-04-10 15:02:55,028 INFO L460 AbstractCegarLoop]: Interpolant automaton has 8 states. [2018-04-10 15:02:55,029 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 136 transitions. [2018-04-10 15:02:55,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 272 [2018-04-10 15:02:55,050 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:55,050 INFO L355 BasicCegarLoop]: trace histogram [36, 30, 30, 30, 30, 30, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:55,050 INFO L408 AbstractCegarLoop]: === Iteration 16 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:55,051 INFO L82 PathProgramCache]: Analyzing trace with hash 2046000651, now seen corresponding path program 10 times [2018-04-10 15:02:55,051 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:55,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:55,090 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:55,340 INFO L134 CoverageAnalysis]: Checked inductivity of 3162 backedges. 22 proven. 945 refuted. 0 times theorem prover too weak. 2195 trivial. 0 not checked. [2018-04-10 15:02:55,341 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:55,341 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2018-04-10 15:02:55,341 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:55,342 INFO L134 CoverageAnalysis]: Checked inductivity of 540 backedges. 0 proven. 175 refuted. 0 times theorem prover too weak. 365 trivial. 0 not checked. [2018-04-10 15:02:55,342 INFO L182 omatonBuilderFactory]: Interpolants [2534#true, 2535#false, 2536#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 2537#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2538#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2539#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2540#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2541#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 2542#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:02:55,343 INFO L134 CoverageAnalysis]: Checked inductivity of 3162 backedges. 22 proven. 945 refuted. 0 times theorem prover too weak. 2195 trivial. 0 not checked. [2018-04-10 15:02:55,343 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-04-10 15:02:55,343 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-04-10 15:02:55,343 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=42, Unknown=0, NotChecked=0, Total=72 [2018-04-10 15:02:55,343 INFO L87 Difference]: Start difference. First operand 123 states and 136 transitions. Second operand 9 states. [2018-04-10 15:02:55,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:55,389 INFO L93 Difference]: Finished difference Result 136 states and 149 transitions. [2018-04-10 15:02:55,390 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-04-10 15:02:55,390 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 271 [2018-04-10 15:02:55,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:55,391 INFO L225 Difference]: With dead ends: 136 [2018-04-10 15:02:55,391 INFO L226 Difference]: Without dead ends: 133 [2018-04-10 15:02:55,391 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2018-04-10 15:02:55,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2018-04-10 15:02:55,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 129. [2018-04-10 15:02:55,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 129 states. [2018-04-10 15:02:55,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 142 transitions. [2018-04-10 15:02:55,395 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 142 transitions. Word has length 271 [2018-04-10 15:02:55,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:55,395 INFO L459 AbstractCegarLoop]: Abstraction has 129 states and 142 transitions. [2018-04-10 15:02:55,395 INFO L460 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-04-10 15:02:55,395 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 142 transitions. [2018-04-10 15:02:55,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 308 [2018-04-10 15:02:55,397 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:55,397 INFO L355 BasicCegarLoop]: trace histogram [42, 36, 36, 36, 36, 36, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:55,397 INFO L408 AbstractCegarLoop]: === Iteration 17 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:55,398 INFO L82 PathProgramCache]: Analyzing trace with hash -416957317, now seen corresponding path program 11 times [2018-04-10 15:02:55,398 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:55,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:55,434 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:55,618 INFO L134 CoverageAnalysis]: Checked inductivity of 4404 backedges. 0 proven. 102 refuted. 0 times theorem prover too weak. 4302 trivial. 0 not checked. [2018-04-10 15:02:55,618 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:55,618 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2018-04-10 15:02:55,619 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:55,619 INFO L134 CoverageAnalysis]: Checked inductivity of 630 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 630 trivial. 0 not checked. [2018-04-10 15:02:55,619 INFO L182 omatonBuilderFactory]: Interpolants [2816#(<= main_~i~1 4), 2817#(<= main_~i~1 5), 2818#(<= main_~i~1 6), 2810#true, 2811#false, 2812#(= main_~i~1 0), 2813#(<= main_~i~1 1), 2814#(<= main_~i~1 2), 2815#(<= main_~i~1 3)] [2018-04-10 15:02:55,621 INFO L134 CoverageAnalysis]: Checked inductivity of 4404 backedges. 0 proven. 102 refuted. 0 times theorem prover too weak. 4302 trivial. 0 not checked. [2018-04-10 15:02:55,621 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-04-10 15:02:55,621 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-04-10 15:02:55,621 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=36, Unknown=0, NotChecked=0, Total=72 [2018-04-10 15:02:55,622 INFO L87 Difference]: Start difference. First operand 129 states and 142 transitions. Second operand 9 states. [2018-04-10 15:02:55,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:55,716 INFO L93 Difference]: Finished difference Result 182 states and 192 transitions. [2018-04-10 15:02:55,716 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-04-10 15:02:55,716 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 307 [2018-04-10 15:02:55,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:55,718 INFO L225 Difference]: With dead ends: 182 [2018-04-10 15:02:55,718 INFO L226 Difference]: Without dead ends: 182 [2018-04-10 15:02:55,718 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=36, Invalid=36, Unknown=0, NotChecked=0, Total=72 [2018-04-10 15:02:55,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2018-04-10 15:02:55,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 140. [2018-04-10 15:02:55,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140 states. [2018-04-10 15:02:55,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 155 transitions. [2018-04-10 15:02:55,723 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 155 transitions. Word has length 307 [2018-04-10 15:02:55,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:55,724 INFO L459 AbstractCegarLoop]: Abstraction has 140 states and 155 transitions. [2018-04-10 15:02:55,724 INFO L460 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-04-10 15:02:55,724 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 155 transitions. [2018-04-10 15:02:55,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 356 [2018-04-10 15:02:55,726 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:55,726 INFO L355 BasicCegarLoop]: trace histogram [49, 42, 42, 42, 42, 42, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:55,726 INFO L408 AbstractCegarLoop]: === Iteration 18 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:55,726 INFO L82 PathProgramCache]: Analyzing trace with hash -1766255124, now seen corresponding path program 12 times [2018-04-10 15:02:55,727 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:55,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:55,770 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:56,073 INFO L134 CoverageAnalysis]: Checked inductivity of 6020 backedges. 26 proven. 1572 refuted. 0 times theorem prover too weak. 4422 trivial. 0 not checked. [2018-04-10 15:02:56,073 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:56,073 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2018-04-10 15:02:56,074 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:56,074 INFO L134 CoverageAnalysis]: Checked inductivity of 882 backedges. 0 proven. 246 refuted. 0 times theorem prover too weak. 636 trivial. 0 not checked. [2018-04-10 15:02:56,074 INFO L182 omatonBuilderFactory]: Interpolants [3141#true, 3142#false, 3143#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 3144#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3145#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3146#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3147#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3148#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3149#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3150#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:02:56,075 INFO L134 CoverageAnalysis]: Checked inductivity of 6020 backedges. 26 proven. 1572 refuted. 0 times theorem prover too weak. 4422 trivial. 0 not checked. [2018-04-10 15:02:56,075 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-04-10 15:02:56,075 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-04-10 15:02:56,076 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2018-04-10 15:02:56,076 INFO L87 Difference]: Start difference. First operand 140 states and 155 transitions. Second operand 10 states. [2018-04-10 15:02:56,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:56,132 INFO L93 Difference]: Finished difference Result 153 states and 168 transitions. [2018-04-10 15:02:56,132 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-04-10 15:02:56,132 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 355 [2018-04-10 15:02:56,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:56,133 INFO L225 Difference]: With dead ends: 153 [2018-04-10 15:02:56,133 INFO L226 Difference]: Without dead ends: 150 [2018-04-10 15:02:56,133 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=63, Unknown=0, NotChecked=0, Total=110 [2018-04-10 15:02:56,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2018-04-10 15:02:56,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 146. [2018-04-10 15:02:56,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 146 states. [2018-04-10 15:02:56,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 161 transitions. [2018-04-10 15:02:56,138 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 161 transitions. Word has length 355 [2018-04-10 15:02:56,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:56,138 INFO L459 AbstractCegarLoop]: Abstraction has 146 states and 161 transitions. [2018-04-10 15:02:56,138 INFO L460 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-04-10 15:02:56,138 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 161 transitions. [2018-04-10 15:02:56,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 398 [2018-04-10 15:02:56,140 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:56,141 INFO L355 BasicCegarLoop]: trace histogram [56, 49, 49, 49, 49, 49, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:56,141 INFO L408 AbstractCegarLoop]: === Iteration 19 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:56,141 INFO L82 PathProgramCache]: Analyzing trace with hash 1901043492, now seen corresponding path program 13 times [2018-04-10 15:02:56,143 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:56,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:56,173 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:56,387 INFO L134 CoverageAnalysis]: Checked inductivity of 8008 backedges. 0 proven. 140 refuted. 0 times theorem prover too weak. 7868 trivial. 0 not checked. [2018-04-10 15:02:56,387 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:56,387 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2018-04-10 15:02:56,387 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:56,388 INFO L134 CoverageAnalysis]: Checked inductivity of 1008 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1008 trivial. 0 not checked. [2018-04-10 15:02:56,388 INFO L182 omatonBuilderFactory]: Interpolants [3456#(<= main_~i~1 2), 3457#(<= main_~i~1 3), 3458#(<= main_~i~1 4), 3459#(<= main_~i~1 5), 3460#(<= main_~i~1 6), 3461#(<= main_~i~1 7), 3452#true, 3453#false, 3454#(= main_~i~1 0), 3455#(<= main_~i~1 1)] [2018-04-10 15:02:56,390 INFO L134 CoverageAnalysis]: Checked inductivity of 8008 backedges. 0 proven. 140 refuted. 0 times theorem prover too weak. 7868 trivial. 0 not checked. [2018-04-10 15:02:56,390 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2018-04-10 15:02:56,390 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2018-04-10 15:02:56,390 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=45, Unknown=0, NotChecked=0, Total=90 [2018-04-10 15:02:56,390 INFO L87 Difference]: Start difference. First operand 146 states and 161 transitions. Second operand 10 states. [2018-04-10 15:02:56,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:56,487 INFO L93 Difference]: Finished difference Result 204 states and 215 transitions. [2018-04-10 15:02:56,487 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2018-04-10 15:02:56,488 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 397 [2018-04-10 15:02:56,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:56,489 INFO L225 Difference]: With dead ends: 204 [2018-04-10 15:02:56,489 INFO L226 Difference]: Without dead ends: 204 [2018-04-10 15:02:56,489 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=45, Unknown=0, NotChecked=0, Total=90 [2018-04-10 15:02:56,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 204 states. [2018-04-10 15:02:56,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 204 to 157. [2018-04-10 15:02:56,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 157 states. [2018-04-10 15:02:56,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 174 transitions. [2018-04-10 15:02:56,494 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 174 transitions. Word has length 397 [2018-04-10 15:02:56,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:56,494 INFO L459 AbstractCegarLoop]: Abstraction has 157 states and 174 transitions. [2018-04-10 15:02:56,494 INFO L460 AbstractCegarLoop]: Interpolant automaton has 10 states. [2018-04-10 15:02:56,495 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 174 transitions. [2018-04-10 15:02:56,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 452 [2018-04-10 15:02:56,498 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:56,498 INFO L355 BasicCegarLoop]: trace histogram [64, 56, 56, 56, 56, 56, 9, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:56,498 INFO L408 AbstractCegarLoop]: === Iteration 20 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:56,498 INFO L82 PathProgramCache]: Analyzing trace with hash 319186589, now seen corresponding path program 14 times [2018-04-10 15:02:56,499 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:56,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:56,542 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:57,072 INFO L134 CoverageAnalysis]: Checked inductivity of 10488 backedges. 30 proven. 2429 refuted. 0 times theorem prover too weak. 8029 trivial. 0 not checked. [2018-04-10 15:02:57,073 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:57,073 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2018-04-10 15:02:57,073 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:57,074 INFO L134 CoverageAnalysis]: Checked inductivity of 1344 backedges. 0 proven. 329 refuted. 0 times theorem prover too weak. 1015 trivial. 0 not checked. [2018-04-10 15:02:57,074 INFO L182 omatonBuilderFactory]: Interpolants [3824#false, 3825#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 3826#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3827#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3828#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3829#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3830#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3831#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3832#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 3833#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 3823#true] [2018-04-10 15:02:57,075 INFO L134 CoverageAnalysis]: Checked inductivity of 10488 backedges. 30 proven. 2429 refuted. 0 times theorem prover too weak. 8029 trivial. 0 not checked. [2018-04-10 15:02:57,076 INFO L442 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-04-10 15:02:57,076 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-04-10 15:02:57,076 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=63, Unknown=0, NotChecked=0, Total=110 [2018-04-10 15:02:57,076 INFO L87 Difference]: Start difference. First operand 157 states and 174 transitions. Second operand 11 states. [2018-04-10 15:02:57,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:57,155 INFO L93 Difference]: Finished difference Result 170 states and 187 transitions. [2018-04-10 15:02:57,155 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-04-10 15:02:57,155 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 451 [2018-04-10 15:02:57,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:57,157 INFO L225 Difference]: With dead ends: 170 [2018-04-10 15:02:57,157 INFO L226 Difference]: Without dead ends: 167 [2018-04-10 15:02:57,157 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=57, Invalid=75, Unknown=0, NotChecked=0, Total=132 [2018-04-10 15:02:57,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2018-04-10 15:02:57,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 163. [2018-04-10 15:02:57,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 163 states. [2018-04-10 15:02:57,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 163 states to 163 states and 180 transitions. [2018-04-10 15:02:57,161 INFO L78 Accepts]: Start accepts. Automaton has 163 states and 180 transitions. Word has length 451 [2018-04-10 15:02:57,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:57,162 INFO L459 AbstractCegarLoop]: Abstraction has 163 states and 180 transitions. [2018-04-10 15:02:57,162 INFO L460 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-04-10 15:02:57,162 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 180 transitions. [2018-04-10 15:02:57,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 500 [2018-04-10 15:02:57,164 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:57,165 INFO L355 BasicCegarLoop]: trace histogram [72, 64, 64, 64, 64, 64, 9, 8, 8, 8, 8, 8, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:57,165 INFO L408 AbstractCegarLoop]: === Iteration 21 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:57,165 INFO L82 PathProgramCache]: Analyzing trace with hash -702635043, now seen corresponding path program 15 times [2018-04-10 15:02:57,166 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:57,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:57,216 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:57,553 INFO L134 CoverageAnalysis]: Checked inductivity of 13472 backedges. 0 proven. 184 refuted. 0 times theorem prover too weak. 13288 trivial. 0 not checked. [2018-04-10 15:02:57,554 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:57,554 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [11] total 11 [2018-04-10 15:02:57,554 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:57,555 INFO L134 CoverageAnalysis]: Checked inductivity of 1512 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1512 trivial. 0 not checked. [2018-04-10 15:02:57,555 INFO L182 omatonBuilderFactory]: Interpolants [4176#(<= main_~i~1 5), 4177#(<= main_~i~1 6), 4178#(<= main_~i~1 7), 4179#(<= main_~i~1 8), 4169#true, 4170#false, 4171#(= main_~i~1 0), 4172#(<= main_~i~1 1), 4173#(<= main_~i~1 2), 4174#(<= main_~i~1 3), 4175#(<= main_~i~1 4)] [2018-04-10 15:02:57,587 INFO L134 CoverageAnalysis]: Checked inductivity of 13472 backedges. 0 proven. 184 refuted. 0 times theorem prover too weak. 13288 trivial. 0 not checked. [2018-04-10 15:02:57,587 INFO L442 AbstractCegarLoop]: Interpolant automaton has 11 states [2018-04-10 15:02:57,588 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2018-04-10 15:02:57,588 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=55, Unknown=0, NotChecked=0, Total=110 [2018-04-10 15:02:57,588 INFO L87 Difference]: Start difference. First operand 163 states and 180 transitions. Second operand 11 states. [2018-04-10 15:02:57,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:57,699 INFO L93 Difference]: Finished difference Result 226 states and 238 transitions. [2018-04-10 15:02:57,699 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2018-04-10 15:02:57,699 INFO L78 Accepts]: Start accepts. Automaton has 11 states. Word has length 499 [2018-04-10 15:02:57,700 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:57,701 INFO L225 Difference]: With dead ends: 226 [2018-04-10 15:02:57,701 INFO L226 Difference]: Without dead ends: 226 [2018-04-10 15:02:57,702 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=55, Unknown=0, NotChecked=0, Total=110 [2018-04-10 15:02:57,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 226 states. [2018-04-10 15:02:57,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 226 to 174. [2018-04-10 15:02:57,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 174 states. [2018-04-10 15:02:57,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 174 states to 174 states and 193 transitions. [2018-04-10 15:02:57,706 INFO L78 Accepts]: Start accepts. Automaton has 174 states and 193 transitions. Word has length 499 [2018-04-10 15:02:57,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:57,707 INFO L459 AbstractCegarLoop]: Abstraction has 174 states and 193 transitions. [2018-04-10 15:02:57,707 INFO L460 AbstractCegarLoop]: Interpolant automaton has 11 states. [2018-04-10 15:02:57,707 INFO L276 IsEmpty]: Start isEmpty. Operand 174 states and 193 transitions. [2018-04-10 15:02:57,710 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 560 [2018-04-10 15:02:57,711 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:57,711 INFO L355 BasicCegarLoop]: trace histogram [81, 72, 72, 72, 72, 72, 10, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:57,711 INFO L408 AbstractCegarLoop]: === Iteration 22 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:57,711 INFO L82 PathProgramCache]: Analyzing trace with hash 1002440158, now seen corresponding path program 16 times [2018-04-10 15:02:57,712 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:57,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:57,762 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:58,453 INFO L134 CoverageAnalysis]: Checked inductivity of 17082 backedges. 34 proven. 3552 refuted. 0 times theorem prover too weak. 13496 trivial. 0 not checked. [2018-04-10 15:02:58,453 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:58,453 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-10 15:02:58,453 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:58,454 INFO L134 CoverageAnalysis]: Checked inductivity of 1944 backedges. 0 proven. 424 refuted. 0 times theorem prover too weak. 1520 trivial. 0 not checked. [2018-04-10 15:02:58,454 INFO L182 omatonBuilderFactory]: Interpolants [4580#true, 4581#false, 4582#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 4583#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4584#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4585#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4586#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4587#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4588#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4589#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 4590#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 4591#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:02:58,455 INFO L134 CoverageAnalysis]: Checked inductivity of 17082 backedges. 34 proven. 3552 refuted. 0 times theorem prover too weak. 13496 trivial. 0 not checked. [2018-04-10 15:02:58,455 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-10 15:02:58,455 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-10 15:02:58,455 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=75, Unknown=0, NotChecked=0, Total=132 [2018-04-10 15:02:58,456 INFO L87 Difference]: Start difference. First operand 174 states and 193 transitions. Second operand 12 states. [2018-04-10 15:02:58,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:58,535 INFO L93 Difference]: Finished difference Result 187 states and 206 transitions. [2018-04-10 15:02:58,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-04-10 15:02:58,537 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 559 [2018-04-10 15:02:58,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:58,538 INFO L225 Difference]: With dead ends: 187 [2018-04-10 15:02:58,538 INFO L226 Difference]: Without dead ends: 184 [2018-04-10 15:02:58,539 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=88, Unknown=0, NotChecked=0, Total=156 [2018-04-10 15:02:58,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2018-04-10 15:02:58,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 180. [2018-04-10 15:02:58,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 180 states. [2018-04-10 15:02:58,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 199 transitions. [2018-04-10 15:02:58,543 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 199 transitions. Word has length 559 [2018-04-10 15:02:58,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:58,543 INFO L459 AbstractCegarLoop]: Abstraction has 180 states and 199 transitions. [2018-04-10 15:02:58,543 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-10 15:02:58,543 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 199 transitions. [2018-04-10 15:02:58,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 614 [2018-04-10 15:02:58,546 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:58,547 INFO L355 BasicCegarLoop]: trace histogram [90, 81, 81, 81, 81, 81, 10, 9, 9, 9, 9, 9, 9, 9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:58,547 INFO L408 AbstractCegarLoop]: === Iteration 23 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:58,547 INFO L82 PathProgramCache]: Analyzing trace with hash -978150298, now seen corresponding path program 17 times [2018-04-10 15:02:58,548 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:58,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:58,653 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:02:59,164 INFO L134 CoverageAnalysis]: Checked inductivity of 21348 backedges. 0 proven. 234 refuted. 0 times theorem prover too weak. 21114 trivial. 0 not checked. [2018-04-10 15:02:59,164 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:02:59,164 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2018-04-10 15:02:59,164 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:02:59,165 INFO L134 CoverageAnalysis]: Checked inductivity of 2160 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2160 trivial. 0 not checked. [2018-04-10 15:02:59,165 INFO L182 omatonBuilderFactory]: Interpolants [4961#true, 4962#false, 4963#(= main_~i~1 0), 4964#(<= main_~i~1 1), 4965#(<= main_~i~1 2), 4966#(<= main_~i~1 3), 4967#(<= main_~i~1 4), 4968#(<= main_~i~1 5), 4969#(<= main_~i~1 6), 4970#(<= main_~i~1 7), 4971#(<= main_~i~1 8), 4972#(<= main_~i~1 9)] [2018-04-10 15:02:59,166 INFO L134 CoverageAnalysis]: Checked inductivity of 21348 backedges. 0 proven. 234 refuted. 0 times theorem prover too weak. 21114 trivial. 0 not checked. [2018-04-10 15:02:59,166 INFO L442 AbstractCegarLoop]: Interpolant automaton has 12 states [2018-04-10 15:02:59,166 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2018-04-10 15:02:59,167 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=66, Unknown=0, NotChecked=0, Total=132 [2018-04-10 15:02:59,167 INFO L87 Difference]: Start difference. First operand 180 states and 199 transitions. Second operand 12 states. [2018-04-10 15:02:59,302 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:02:59,303 INFO L93 Difference]: Finished difference Result 248 states and 261 transitions. [2018-04-10 15:02:59,303 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-04-10 15:02:59,303 INFO L78 Accepts]: Start accepts. Automaton has 12 states. Word has length 613 [2018-04-10 15:02:59,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:02:59,305 INFO L225 Difference]: With dead ends: 248 [2018-04-10 15:02:59,305 INFO L226 Difference]: Without dead ends: 248 [2018-04-10 15:02:59,305 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=66, Unknown=0, NotChecked=0, Total=132 [2018-04-10 15:02:59,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2018-04-10 15:02:59,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 191. [2018-04-10 15:02:59,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2018-04-10 15:02:59,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 212 transitions. [2018-04-10 15:02:59,310 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 212 transitions. Word has length 613 [2018-04-10 15:02:59,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:02:59,311 INFO L459 AbstractCegarLoop]: Abstraction has 191 states and 212 transitions. [2018-04-10 15:02:59,311 INFO L460 AbstractCegarLoop]: Interpolant automaton has 12 states. [2018-04-10 15:02:59,311 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 212 transitions. [2018-04-10 15:02:59,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 680 [2018-04-10 15:02:59,315 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:02:59,315 INFO L355 BasicCegarLoop]: trace histogram [100, 90, 90, 90, 90, 90, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:02:59,315 INFO L408 AbstractCegarLoop]: === Iteration 24 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:02:59,316 INFO L82 PathProgramCache]: Analyzing trace with hash 711631215, now seen corresponding path program 18 times [2018-04-10 15:02:59,316 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:02:59,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:02:59,370 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:00,196 INFO L134 CoverageAnalysis]: Checked inductivity of 26390 backedges. 38 proven. 4977 refuted. 0 times theorem prover too weak. 21375 trivial. 0 not checked. [2018-04-10 15:03:00,197 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:00,197 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-10 15:03:00,197 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:00,197 INFO L134 CoverageAnalysis]: Checked inductivity of 2700 backedges. 0 proven. 531 refuted. 0 times theorem prover too weak. 2169 trivial. 0 not checked. [2018-04-10 15:03:00,198 INFO L182 omatonBuilderFactory]: Interpolants [5412#true, 5413#false, 5414#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 5415#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5416#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5417#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5418#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5419#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5420#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5421#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5422#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 5423#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 5424#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:03:00,198 INFO L134 CoverageAnalysis]: Checked inductivity of 26390 backedges. 38 proven. 4977 refuted. 0 times theorem prover too weak. 21375 trivial. 0 not checked. [2018-04-10 15:03:00,198 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-10 15:03:00,198 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-10 15:03:00,199 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=88, Unknown=0, NotChecked=0, Total=156 [2018-04-10 15:03:00,199 INFO L87 Difference]: Start difference. First operand 191 states and 212 transitions. Second operand 13 states. [2018-04-10 15:03:00,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:00,291 INFO L93 Difference]: Finished difference Result 204 states and 225 transitions. [2018-04-10 15:03:00,291 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-04-10 15:03:00,291 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 679 [2018-04-10 15:03:00,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:00,293 INFO L225 Difference]: With dead ends: 204 [2018-04-10 15:03:00,293 INFO L226 Difference]: Without dead ends: 201 [2018-04-10 15:03:00,293 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=102, Unknown=0, NotChecked=0, Total=182 [2018-04-10 15:03:00,293 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2018-04-10 15:03:00,297 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 197. [2018-04-10 15:03:00,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 197 states. [2018-04-10 15:03:00,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 218 transitions. [2018-04-10 15:03:00,299 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 218 transitions. Word has length 679 [2018-04-10 15:03:00,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:00,300 INFO L459 AbstractCegarLoop]: Abstraction has 197 states and 218 transitions. [2018-04-10 15:03:00,300 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-10 15:03:00,300 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 218 transitions. [2018-04-10 15:03:00,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 740 [2018-04-10 15:03:00,306 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:00,306 INFO L355 BasicCegarLoop]: trace histogram [110, 100, 100, 100, 100, 100, 11, 10, 10, 10, 10, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:00,306 INFO L408 AbstractCegarLoop]: === Iteration 25 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:00,307 INFO L82 PathProgramCache]: Analyzing trace with hash -1834618241, now seen corresponding path program 19 times [2018-04-10 15:03:00,308 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:00,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:00,369 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:00,952 INFO L134 CoverageAnalysis]: Checked inductivity of 32260 backedges. 0 proven. 290 refuted. 0 times theorem prover too weak. 31970 trivial. 0 not checked. [2018-04-10 15:03:00,953 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:00,953 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2018-04-10 15:03:00,953 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:00,953 INFO L134 CoverageAnalysis]: Checked inductivity of 2970 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2970 trivial. 0 not checked. [2018-04-10 15:03:00,953 INFO L182 omatonBuilderFactory]: Interpolants [5828#true, 5829#false, 5830#(= main_~i~1 0), 5831#(<= main_~i~1 1), 5832#(<= main_~i~1 2), 5833#(<= main_~i~1 3), 5834#(<= main_~i~1 4), 5835#(<= main_~i~1 5), 5836#(<= main_~i~1 6), 5837#(<= main_~i~1 7), 5838#(<= main_~i~1 8), 5839#(<= main_~i~1 9), 5840#(<= main_~i~1 10)] [2018-04-10 15:03:00,954 INFO L134 CoverageAnalysis]: Checked inductivity of 32260 backedges. 0 proven. 290 refuted. 0 times theorem prover too weak. 31970 trivial. 0 not checked. [2018-04-10 15:03:00,954 INFO L442 AbstractCegarLoop]: Interpolant automaton has 13 states [2018-04-10 15:03:00,954 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2018-04-10 15:03:00,954 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=78, Invalid=78, Unknown=0, NotChecked=0, Total=156 [2018-04-10 15:03:00,954 INFO L87 Difference]: Start difference. First operand 197 states and 218 transitions. Second operand 13 states. [2018-04-10 15:03:01,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:01,090 INFO L93 Difference]: Finished difference Result 270 states and 284 transitions. [2018-04-10 15:03:01,090 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2018-04-10 15:03:01,090 INFO L78 Accepts]: Start accepts. Automaton has 13 states. Word has length 739 [2018-04-10 15:03:01,091 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:01,091 INFO L225 Difference]: With dead ends: 270 [2018-04-10 15:03:01,091 INFO L226 Difference]: Without dead ends: 270 [2018-04-10 15:03:01,092 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=78, Invalid=78, Unknown=0, NotChecked=0, Total=156 [2018-04-10 15:03:01,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2018-04-10 15:03:01,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 208. [2018-04-10 15:03:01,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 208 states. [2018-04-10 15:03:01,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 231 transitions. [2018-04-10 15:03:01,096 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 231 transitions. Word has length 739 [2018-04-10 15:03:01,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:01,096 INFO L459 AbstractCegarLoop]: Abstraction has 208 states and 231 transitions. [2018-04-10 15:03:01,096 INFO L460 AbstractCegarLoop]: Interpolant automaton has 13 states. [2018-04-10 15:03:01,096 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 231 transitions. [2018-04-10 15:03:01,100 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 812 [2018-04-10 15:03:01,100 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:01,100 INFO L355 BasicCegarLoop]: trace histogram [121, 110, 110, 110, 110, 110, 12, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:01,100 INFO L408 AbstractCegarLoop]: === Iteration 26 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:01,100 INFO L82 PathProgramCache]: Analyzing trace with hash -2041430256, now seen corresponding path program 20 times [2018-04-10 15:03:01,101 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:01,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:01,137 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:02,367 INFO L134 CoverageAnalysis]: Checked inductivity of 39072 backedges. 42 proven. 6740 refuted. 0 times theorem prover too weak. 32290 trivial. 0 not checked. [2018-04-10 15:03:02,367 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:02,367 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-10 15:03:02,368 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:02,368 INFO L134 CoverageAnalysis]: Checked inductivity of 3630 backedges. 0 proven. 650 refuted. 0 times theorem prover too weak. 2980 trivial. 0 not checked. [2018-04-10 15:03:02,368 INFO L182 omatonBuilderFactory]: Interpolants [6319#true, 6320#false, 6321#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 6322#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6323#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6324#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6325#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6326#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6327#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6328#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6329#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 6330#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6331#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 6332#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:03:02,369 INFO L134 CoverageAnalysis]: Checked inductivity of 39072 backedges. 42 proven. 6740 refuted. 0 times theorem prover too weak. 32290 trivial. 0 not checked. [2018-04-10 15:03:02,369 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-10 15:03:02,369 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-10 15:03:02,369 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=80, Invalid=102, Unknown=0, NotChecked=0, Total=182 [2018-04-10 15:03:02,369 INFO L87 Difference]: Start difference. First operand 208 states and 231 transitions. Second operand 14 states. [2018-04-10 15:03:02,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:02,450 INFO L93 Difference]: Finished difference Result 221 states and 244 transitions. [2018-04-10 15:03:02,450 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-04-10 15:03:02,450 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 811 [2018-04-10 15:03:02,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:02,451 INFO L225 Difference]: With dead ends: 221 [2018-04-10 15:03:02,451 INFO L226 Difference]: Without dead ends: 218 [2018-04-10 15:03:02,452 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=93, Invalid=117, Unknown=0, NotChecked=0, Total=210 [2018-04-10 15:03:02,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218 states. [2018-04-10 15:03:02,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218 to 214. [2018-04-10 15:03:02,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2018-04-10 15:03:02,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 237 transitions. [2018-04-10 15:03:02,454 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 237 transitions. Word has length 811 [2018-04-10 15:03:02,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:02,455 INFO L459 AbstractCegarLoop]: Abstraction has 214 states and 237 transitions. [2018-04-10 15:03:02,455 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-10 15:03:02,455 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 237 transitions. [2018-04-10 15:03:02,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 878 [2018-04-10 15:03:02,459 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:02,460 INFO L355 BasicCegarLoop]: trace histogram [132, 121, 121, 121, 121, 121, 12, 11, 11, 11, 11, 11, 11, 11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:02,460 INFO L408 AbstractCegarLoop]: === Iteration 27 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:02,460 INFO L82 PathProgramCache]: Analyzing trace with hash -1088231448, now seen corresponding path program 21 times [2018-04-10 15:03:02,461 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:02,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:02,503 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:03,151 INFO L134 CoverageAnalysis]: Checked inductivity of 46904 backedges. 0 proven. 352 refuted. 0 times theorem prover too weak. 46552 trivial. 0 not checked. [2018-04-10 15:03:03,151 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:03,152 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2018-04-10 15:03:03,152 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:03,152 INFO L134 CoverageAnalysis]: Checked inductivity of 3960 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3960 trivial. 0 not checked. [2018-04-10 15:03:03,152 INFO L182 omatonBuilderFactory]: Interpolants [6770#true, 6771#false, 6772#(= main_~i~1 0), 6773#(<= main_~i~1 1), 6774#(<= main_~i~1 2), 6775#(<= main_~i~1 3), 6776#(<= main_~i~1 4), 6777#(<= main_~i~1 5), 6778#(<= main_~i~1 6), 6779#(<= main_~i~1 7), 6780#(<= main_~i~1 8), 6781#(<= main_~i~1 9), 6782#(<= main_~i~1 10), 6783#(<= main_~i~1 11)] [2018-04-10 15:03:03,153 INFO L134 CoverageAnalysis]: Checked inductivity of 46904 backedges. 0 proven. 352 refuted. 0 times theorem prover too weak. 46552 trivial. 0 not checked. [2018-04-10 15:03:03,153 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2018-04-10 15:03:03,153 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2018-04-10 15:03:03,153 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=91, Invalid=91, Unknown=0, NotChecked=0, Total=182 [2018-04-10 15:03:03,153 INFO L87 Difference]: Start difference. First operand 214 states and 237 transitions. Second operand 14 states. [2018-04-10 15:03:03,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:03,275 INFO L93 Difference]: Finished difference Result 292 states and 307 transitions. [2018-04-10 15:03:03,275 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-04-10 15:03:03,275 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 877 [2018-04-10 15:03:03,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:03,277 INFO L225 Difference]: With dead ends: 292 [2018-04-10 15:03:03,277 INFO L226 Difference]: Without dead ends: 292 [2018-04-10 15:03:03,277 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=91, Invalid=91, Unknown=0, NotChecked=0, Total=182 [2018-04-10 15:03:03,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2018-04-10 15:03:03,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 225. [2018-04-10 15:03:03,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 225 states. [2018-04-10 15:03:03,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 250 transitions. [2018-04-10 15:03:03,280 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 250 transitions. Word has length 877 [2018-04-10 15:03:03,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:03,281 INFO L459 AbstractCegarLoop]: Abstraction has 225 states and 250 transitions. [2018-04-10 15:03:03,281 INFO L460 AbstractCegarLoop]: Interpolant automaton has 14 states. [2018-04-10 15:03:03,281 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 250 transitions. [2018-04-10 15:03:03,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 956 [2018-04-10 15:03:03,286 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:03,286 INFO L355 BasicCegarLoop]: trace histogram [144, 132, 132, 132, 132, 132, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:03,286 INFO L408 AbstractCegarLoop]: === Iteration 28 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:03,286 INFO L82 PathProgramCache]: Analyzing trace with hash -500335487, now seen corresponding path program 22 times [2018-04-10 15:03:03,287 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:03,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:03,327 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:04,613 INFO L134 CoverageAnalysis]: Checked inductivity of 55860 backedges. 46 proven. 8877 refuted. 0 times theorem prover too weak. 46937 trivial. 0 not checked. [2018-04-10 15:03:04,614 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:04,614 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-10 15:03:04,614 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:04,614 INFO L134 CoverageAnalysis]: Checked inductivity of 4752 backedges. 0 proven. 781 refuted. 0 times theorem prover too weak. 3971 trivial. 0 not checked. [2018-04-10 15:03:04,614 INFO L182 omatonBuilderFactory]: Interpolants [7301#true, 7302#false, 7303#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 7304#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7305#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7306#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7307#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7308#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7309#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7310#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7311#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 7312#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7313#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 7314#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 7315#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:03:04,615 INFO L134 CoverageAnalysis]: Checked inductivity of 55860 backedges. 46 proven. 8877 refuted. 0 times theorem prover too weak. 46937 trivial. 0 not checked. [2018-04-10 15:03:04,615 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-10 15:03:04,615 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-10 15:03:04,615 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=93, Invalid=117, Unknown=0, NotChecked=0, Total=210 [2018-04-10 15:03:04,616 INFO L87 Difference]: Start difference. First operand 225 states and 250 transitions. Second operand 15 states. [2018-04-10 15:03:04,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:04,700 INFO L93 Difference]: Finished difference Result 238 states and 263 transitions. [2018-04-10 15:03:04,700 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-04-10 15:03:04,700 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 955 [2018-04-10 15:03:04,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:04,702 INFO L225 Difference]: With dead ends: 238 [2018-04-10 15:03:04,702 INFO L226 Difference]: Without dead ends: 235 [2018-04-10 15:03:04,702 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=107, Invalid=133, Unknown=0, NotChecked=0, Total=240 [2018-04-10 15:03:04,702 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2018-04-10 15:03:04,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 231. [2018-04-10 15:03:04,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 231 states. [2018-04-10 15:03:04,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 256 transitions. [2018-04-10 15:03:04,706 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 256 transitions. Word has length 955 [2018-04-10 15:03:04,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:04,706 INFO L459 AbstractCegarLoop]: Abstraction has 231 states and 256 transitions. [2018-04-10 15:03:04,706 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-10 15:03:04,706 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 256 transitions. [2018-04-10 15:03:04,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1028 [2018-04-10 15:03:04,712 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:04,712 INFO L355 BasicCegarLoop]: trace histogram [156, 144, 144, 144, 144, 144, 13, 12, 12, 12, 12, 12, 12, 12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:04,712 INFO L408 AbstractCegarLoop]: === Iteration 29 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:04,713 INFO L82 PathProgramCache]: Analyzing trace with hash -1879255455, now seen corresponding path program 23 times [2018-04-10 15:03:04,713 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:04,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:04,757 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:05,646 INFO L134 CoverageAnalysis]: Checked inductivity of 66048 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 65628 trivial. 0 not checked. [2018-04-10 15:03:05,646 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:05,647 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2018-04-10 15:03:05,647 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:05,647 INFO L134 CoverageAnalysis]: Checked inductivity of 5148 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5148 trivial. 0 not checked. [2018-04-10 15:03:05,647 INFO L182 omatonBuilderFactory]: Interpolants [7787#true, 7788#false, 7789#(= main_~i~1 0), 7790#(<= main_~i~1 1), 7791#(<= main_~i~1 2), 7792#(<= main_~i~1 3), 7793#(<= main_~i~1 4), 7794#(<= main_~i~1 5), 7795#(<= main_~i~1 6), 7796#(<= main_~i~1 7), 7797#(<= main_~i~1 8), 7798#(<= main_~i~1 9), 7799#(<= main_~i~1 10), 7800#(<= main_~i~1 11), 7801#(<= main_~i~1 12)] [2018-04-10 15:03:05,648 INFO L134 CoverageAnalysis]: Checked inductivity of 66048 backedges. 0 proven. 420 refuted. 0 times theorem prover too weak. 65628 trivial. 0 not checked. [2018-04-10 15:03:05,648 INFO L442 AbstractCegarLoop]: Interpolant automaton has 15 states [2018-04-10 15:03:05,648 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-04-10 15:03:05,648 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=105, Invalid=105, Unknown=0, NotChecked=0, Total=210 [2018-04-10 15:03:05,648 INFO L87 Difference]: Start difference. First operand 231 states and 256 transitions. Second operand 15 states. [2018-04-10 15:03:05,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:05,771 INFO L93 Difference]: Finished difference Result 314 states and 330 transitions. [2018-04-10 15:03:05,777 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2018-04-10 15:03:05,777 INFO L78 Accepts]: Start accepts. Automaton has 15 states. Word has length 1027 [2018-04-10 15:03:05,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:05,779 INFO L225 Difference]: With dead ends: 314 [2018-04-10 15:03:05,779 INFO L226 Difference]: Without dead ends: 314 [2018-04-10 15:03:05,780 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=105, Invalid=105, Unknown=0, NotChecked=0, Total=210 [2018-04-10 15:03:05,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2018-04-10 15:03:05,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 242. [2018-04-10 15:03:05,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 242 states. [2018-04-10 15:03:05,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 269 transitions. [2018-04-10 15:03:05,786 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 269 transitions. Word has length 1027 [2018-04-10 15:03:05,787 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:05,787 INFO L459 AbstractCegarLoop]: Abstraction has 242 states and 269 transitions. [2018-04-10 15:03:05,787 INFO L460 AbstractCegarLoop]: Interpolant automaton has 15 states. [2018-04-10 15:03:05,787 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 269 transitions. [2018-04-10 15:03:05,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1112 [2018-04-10 15:03:05,797 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:05,797 INFO L355 BasicCegarLoop]: trace histogram [169, 156, 156, 156, 156, 156, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:05,798 INFO L408 AbstractCegarLoop]: === Iteration 30 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:05,798 INFO L82 PathProgramCache]: Analyzing trace with hash 1856294786, now seen corresponding path program 24 times [2018-04-10 15:03:05,799 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:05,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:05,878 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:07,377 INFO L134 CoverageAnalysis]: Checked inductivity of 77558 backedges. 50 proven. 11424 refuted. 0 times theorem prover too weak. 66084 trivial. 0 not checked. [2018-04-10 15:03:07,377 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:07,377 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-10 15:03:07,377 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:07,378 INFO L134 CoverageAnalysis]: Checked inductivity of 6084 backedges. 0 proven. 924 refuted. 0 times theorem prover too weak. 5160 trivial. 0 not checked. [2018-04-10 15:03:07,378 INFO L182 omatonBuilderFactory]: Interpolants [8358#true, 8359#false, 8360#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 8361#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8362#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8363#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8364#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8365#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8366#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8367#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8368#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 8369#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8370#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8371#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 8372#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 8373#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:03:07,379 INFO L134 CoverageAnalysis]: Checked inductivity of 77558 backedges. 50 proven. 11424 refuted. 0 times theorem prover too weak. 66084 trivial. 0 not checked. [2018-04-10 15:03:07,379 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-10 15:03:07,379 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-10 15:03:07,379 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=133, Unknown=0, NotChecked=0, Total=240 [2018-04-10 15:03:07,379 INFO L87 Difference]: Start difference. First operand 242 states and 269 transitions. Second operand 16 states. [2018-04-10 15:03:07,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:07,459 INFO L93 Difference]: Finished difference Result 255 states and 282 transitions. [2018-04-10 15:03:07,459 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-04-10 15:03:07,459 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 1111 [2018-04-10 15:03:07,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:07,460 INFO L225 Difference]: With dead ends: 255 [2018-04-10 15:03:07,460 INFO L226 Difference]: Without dead ends: 252 [2018-04-10 15:03:07,461 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=150, Unknown=0, NotChecked=0, Total=272 [2018-04-10 15:03:07,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2018-04-10 15:03:07,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 248. [2018-04-10 15:03:07,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 248 states. [2018-04-10 15:03:07,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 275 transitions. [2018-04-10 15:03:07,466 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 275 transitions. Word has length 1111 [2018-04-10 15:03:07,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:07,466 INFO L459 AbstractCegarLoop]: Abstraction has 248 states and 275 transitions. [2018-04-10 15:03:07,467 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-10 15:03:07,467 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 275 transitions. [2018-04-10 15:03:07,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1190 [2018-04-10 15:03:07,477 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:07,477 INFO L355 BasicCegarLoop]: trace histogram [182, 169, 169, 169, 169, 169, 14, 13, 13, 13, 13, 13, 13, 13, 13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:07,477 INFO L408 AbstractCegarLoop]: === Iteration 31 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:07,478 INFO L82 PathProgramCache]: Analyzing trace with hash 1396010922, now seen corresponding path program 25 times [2018-04-10 15:03:07,478 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:07,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:07,555 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:08,781 INFO L134 CoverageAnalysis]: Checked inductivity of 90532 backedges. 0 proven. 494 refuted. 0 times theorem prover too weak. 90038 trivial. 0 not checked. [2018-04-10 15:03:08,781 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:08,781 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2018-04-10 15:03:08,781 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:08,782 INFO L134 CoverageAnalysis]: Checked inductivity of 6552 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6552 trivial. 0 not checked. [2018-04-10 15:03:08,782 INFO L182 omatonBuilderFactory]: Interpolants [8879#true, 8880#false, 8881#(= main_~i~1 0), 8882#(<= main_~i~1 1), 8883#(<= main_~i~1 2), 8884#(<= main_~i~1 3), 8885#(<= main_~i~1 4), 8886#(<= main_~i~1 5), 8887#(<= main_~i~1 6), 8888#(<= main_~i~1 7), 8889#(<= main_~i~1 8), 8890#(<= main_~i~1 9), 8891#(<= main_~i~1 10), 8892#(<= main_~i~1 11), 8893#(<= main_~i~1 12), 8894#(<= main_~i~1 13)] [2018-04-10 15:03:08,783 INFO L134 CoverageAnalysis]: Checked inductivity of 90532 backedges. 0 proven. 494 refuted. 0 times theorem prover too weak. 90038 trivial. 0 not checked. [2018-04-10 15:03:08,783 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2018-04-10 15:03:08,783 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2018-04-10 15:03:08,783 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=120, Unknown=0, NotChecked=0, Total=240 [2018-04-10 15:03:08,783 INFO L87 Difference]: Start difference. First operand 248 states and 275 transitions. Second operand 16 states. [2018-04-10 15:03:08,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:08,896 INFO L93 Difference]: Finished difference Result 336 states and 353 transitions. [2018-04-10 15:03:08,896 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-04-10 15:03:08,896 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 1189 [2018-04-10 15:03:08,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:08,898 INFO L225 Difference]: With dead ends: 336 [2018-04-10 15:03:08,898 INFO L226 Difference]: Without dead ends: 336 [2018-04-10 15:03:08,898 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=120, Invalid=120, Unknown=0, NotChecked=0, Total=240 [2018-04-10 15:03:08,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 336 states. [2018-04-10 15:03:08,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 336 to 259. [2018-04-10 15:03:08,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-04-10 15:03:08,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 288 transitions. [2018-04-10 15:03:08,905 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 288 transitions. Word has length 1189 [2018-04-10 15:03:08,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:08,906 INFO L459 AbstractCegarLoop]: Abstraction has 259 states and 288 transitions. [2018-04-10 15:03:08,906 INFO L460 AbstractCegarLoop]: Interpolant automaton has 16 states. [2018-04-10 15:03:08,906 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 288 transitions. [2018-04-10 15:03:08,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1280 [2018-04-10 15:03:08,919 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:08,919 INFO L355 BasicCegarLoop]: trace histogram [196, 182, 182, 182, 182, 182, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:08,919 INFO L408 AbstractCegarLoop]: === Iteration 32 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:08,920 INFO L82 PathProgramCache]: Analyzing trace with hash -601504301, now seen corresponding path program 26 times [2018-04-10 15:03:08,920 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:09,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:09,006 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:10,873 INFO L134 CoverageAnalysis]: Checked inductivity of 105042 backedges. 54 proven. 14417 refuted. 0 times theorem prover too weak. 90571 trivial. 0 not checked. [2018-04-10 15:03:10,874 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:10,874 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-10 15:03:10,874 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:10,874 INFO L134 CoverageAnalysis]: Checked inductivity of 7644 backedges. 0 proven. 1079 refuted. 0 times theorem prover too weak. 6565 trivial. 0 not checked. [2018-04-10 15:03:10,874 INFO L182 omatonBuilderFactory]: Interpolants [9504#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9505#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 9506#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 9490#true, 9491#false, 9492#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 9493#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9494#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9495#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9496#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9497#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9498#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9499#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9500#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 9501#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9502#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 9503#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)))] [2018-04-10 15:03:10,876 INFO L134 CoverageAnalysis]: Checked inductivity of 105042 backedges. 54 proven. 14417 refuted. 0 times theorem prover too weak. 90571 trivial. 0 not checked. [2018-04-10 15:03:10,876 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-10 15:03:10,876 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-10 15:03:10,876 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=150, Unknown=0, NotChecked=0, Total=272 [2018-04-10 15:03:10,876 INFO L87 Difference]: Start difference. First operand 259 states and 288 transitions. Second operand 17 states. [2018-04-10 15:03:10,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:10,951 INFO L93 Difference]: Finished difference Result 272 states and 301 transitions. [2018-04-10 15:03:10,952 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-04-10 15:03:10,952 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 1279 [2018-04-10 15:03:10,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:10,953 INFO L225 Difference]: With dead ends: 272 [2018-04-10 15:03:10,953 INFO L226 Difference]: Without dead ends: 269 [2018-04-10 15:03:10,953 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=138, Invalid=168, Unknown=0, NotChecked=0, Total=306 [2018-04-10 15:03:10,953 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2018-04-10 15:03:10,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 265. [2018-04-10 15:03:10,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 265 states. [2018-04-10 15:03:10,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 294 transitions. [2018-04-10 15:03:10,957 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 294 transitions. Word has length 1279 [2018-04-10 15:03:10,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:10,957 INFO L459 AbstractCegarLoop]: Abstraction has 265 states and 294 transitions. [2018-04-10 15:03:10,957 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-10 15:03:10,958 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 294 transitions. [2018-04-10 15:03:10,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1364 [2018-04-10 15:03:10,965 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:10,965 INFO L355 BasicCegarLoop]: trace histogram [210, 196, 196, 196, 196, 196, 15, 14, 14, 14, 14, 14, 14, 14, 14, 14, 14, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:10,966 INFO L408 AbstractCegarLoop]: === Iteration 33 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:10,966 INFO L82 PathProgramCache]: Analyzing trace with hash 1767243139, now seen corresponding path program 27 times [2018-04-10 15:03:10,966 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:11,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:11,025 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:12,590 INFO L134 CoverageAnalysis]: Checked inductivity of 121268 backedges. 0 proven. 574 refuted. 0 times theorem prover too weak. 120694 trivial. 0 not checked. [2018-04-10 15:03:12,591 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:12,591 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2018-04-10 15:03:12,591 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:12,591 INFO L134 CoverageAnalysis]: Checked inductivity of 8190 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 8190 trivial. 0 not checked. [2018-04-10 15:03:12,591 INFO L182 omatonBuilderFactory]: Interpolants [10048#(= main_~i~1 0), 10049#(<= main_~i~1 1), 10050#(<= main_~i~1 2), 10051#(<= main_~i~1 3), 10052#(<= main_~i~1 4), 10053#(<= main_~i~1 5), 10054#(<= main_~i~1 6), 10055#(<= main_~i~1 7), 10056#(<= main_~i~1 8), 10057#(<= main_~i~1 9), 10058#(<= main_~i~1 10), 10059#(<= main_~i~1 11), 10060#(<= main_~i~1 12), 10061#(<= main_~i~1 13), 10062#(<= main_~i~1 14), 10046#true, 10047#false] [2018-04-10 15:03:12,593 INFO L134 CoverageAnalysis]: Checked inductivity of 121268 backedges. 0 proven. 574 refuted. 0 times theorem prover too weak. 120694 trivial. 0 not checked. [2018-04-10 15:03:12,593 INFO L442 AbstractCegarLoop]: Interpolant automaton has 17 states [2018-04-10 15:03:12,593 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2018-04-10 15:03:12,593 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=136, Invalid=136, Unknown=0, NotChecked=0, Total=272 [2018-04-10 15:03:12,593 INFO L87 Difference]: Start difference. First operand 265 states and 294 transitions. Second operand 17 states. [2018-04-10 15:03:12,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:12,706 INFO L93 Difference]: Finished difference Result 358 states and 376 transitions. [2018-04-10 15:03:12,706 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2018-04-10 15:03:12,706 INFO L78 Accepts]: Start accepts. Automaton has 17 states. Word has length 1363 [2018-04-10 15:03:12,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:12,708 INFO L225 Difference]: With dead ends: 358 [2018-04-10 15:03:12,708 INFO L226 Difference]: Without dead ends: 358 [2018-04-10 15:03:12,708 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=136, Invalid=136, Unknown=0, NotChecked=0, Total=272 [2018-04-10 15:03:12,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 358 states. [2018-04-10 15:03:12,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 358 to 276. [2018-04-10 15:03:12,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 276 states. [2018-04-10 15:03:12,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 307 transitions. [2018-04-10 15:03:12,713 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 307 transitions. Word has length 1363 [2018-04-10 15:03:12,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:12,713 INFO L459 AbstractCegarLoop]: Abstraction has 276 states and 307 transitions. [2018-04-10 15:03:12,713 INFO L460 AbstractCegarLoop]: Interpolant automaton has 17 states. [2018-04-10 15:03:12,713 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 307 transitions. [2018-04-10 15:03:12,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1460 [2018-04-10 15:03:12,723 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:12,723 INFO L355 BasicCegarLoop]: trace histogram [225, 210, 210, 210, 210, 210, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:12,723 INFO L408 AbstractCegarLoop]: === Iteration 34 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:12,724 INFO L82 PathProgramCache]: Analyzing trace with hash 946488628, now seen corresponding path program 28 times [2018-04-10 15:03:12,724 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:12,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:12,789 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:15,155 INFO L134 CoverageAnalysis]: Checked inductivity of 139260 backedges. 58 proven. 17892 refuted. 0 times theorem prover too weak. 121310 trivial. 0 not checked. [2018-04-10 15:03:15,155 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:15,155 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-10 15:03:15,155 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:15,156 INFO L134 CoverageAnalysis]: Checked inductivity of 9450 backedges. 0 proven. 1246 refuted. 0 times theorem prover too weak. 8204 trivial. 0 not checked. [2018-04-10 15:03:15,156 INFO L182 omatonBuilderFactory]: Interpolants [10697#true, 10698#false, 10699#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 10700#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10701#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10702#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10703#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10704#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10705#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10706#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10707#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 10708#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10709#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10710#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 10711#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10712#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 10713#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 10714#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:03:15,157 INFO L134 CoverageAnalysis]: Checked inductivity of 139260 backedges. 58 proven. 17892 refuted. 0 times theorem prover too weak. 121310 trivial. 0 not checked. [2018-04-10 15:03:15,158 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-10 15:03:15,158 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-10 15:03:15,158 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=168, Unknown=0, NotChecked=0, Total=306 [2018-04-10 15:03:15,158 INFO L87 Difference]: Start difference. First operand 276 states and 307 transitions. Second operand 18 states. [2018-04-10 15:03:15,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:15,242 INFO L93 Difference]: Finished difference Result 289 states and 320 transitions. [2018-04-10 15:03:15,242 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-04-10 15:03:15,242 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 1459 [2018-04-10 15:03:15,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:15,243 INFO L225 Difference]: With dead ends: 289 [2018-04-10 15:03:15,243 INFO L226 Difference]: Without dead ends: 286 [2018-04-10 15:03:15,243 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=155, Invalid=187, Unknown=0, NotChecked=0, Total=342 [2018-04-10 15:03:15,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2018-04-10 15:03:15,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 282. [2018-04-10 15:03:15,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2018-04-10 15:03:15,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 313 transitions. [2018-04-10 15:03:15,247 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 313 transitions. Word has length 1459 [2018-04-10 15:03:15,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:15,247 INFO L459 AbstractCegarLoop]: Abstraction has 282 states and 313 transitions. [2018-04-10 15:03:15,247 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-10 15:03:15,247 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 313 transitions. [2018-04-10 15:03:15,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1550 [2018-04-10 15:03:15,257 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:15,257 INFO L355 BasicCegarLoop]: trace histogram [240, 225, 225, 225, 225, 225, 16, 15, 15, 15, 15, 15, 15, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:15,258 INFO L408 AbstractCegarLoop]: === Iteration 35 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:15,258 INFO L82 PathProgramCache]: Analyzing trace with hash -754671188, now seen corresponding path program 29 times [2018-04-10 15:03:15,258 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:15,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:15,325 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:17,463 INFO L134 CoverageAnalysis]: Checked inductivity of 159240 backedges. 0 proven. 660 refuted. 0 times theorem prover too weak. 158580 trivial. 0 not checked. [2018-04-10 15:03:17,463 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:17,463 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2018-04-10 15:03:17,463 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:17,464 INFO L134 CoverageAnalysis]: Checked inductivity of 10080 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10080 trivial. 0 not checked. [2018-04-10 15:03:17,464 INFO L182 omatonBuilderFactory]: Interpolants [11296#(<= main_~i~1 6), 11297#(<= main_~i~1 7), 11298#(<= main_~i~1 8), 11299#(<= main_~i~1 9), 11300#(<= main_~i~1 10), 11301#(<= main_~i~1 11), 11302#(<= main_~i~1 12), 11303#(<= main_~i~1 13), 11304#(<= main_~i~1 14), 11305#(<= main_~i~1 15), 11288#true, 11289#false, 11290#(= main_~i~1 0), 11291#(<= main_~i~1 1), 11292#(<= main_~i~1 2), 11293#(<= main_~i~1 3), 11294#(<= main_~i~1 4), 11295#(<= main_~i~1 5)] [2018-04-10 15:03:17,465 INFO L134 CoverageAnalysis]: Checked inductivity of 159240 backedges. 0 proven. 660 refuted. 0 times theorem prover too weak. 158580 trivial. 0 not checked. [2018-04-10 15:03:17,466 INFO L442 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-04-10 15:03:17,466 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-04-10 15:03:17,466 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=153, Unknown=0, NotChecked=0, Total=306 [2018-04-10 15:03:17,466 INFO L87 Difference]: Start difference. First operand 282 states and 313 transitions. Second operand 18 states. [2018-04-10 15:03:17,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:17,574 INFO L93 Difference]: Finished difference Result 380 states and 399 transitions. [2018-04-10 15:03:17,574 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-04-10 15:03:17,574 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 1549 [2018-04-10 15:03:17,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:17,576 INFO L225 Difference]: With dead ends: 380 [2018-04-10 15:03:17,576 INFO L226 Difference]: Without dead ends: 380 [2018-04-10 15:03:17,576 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=153, Invalid=153, Unknown=0, NotChecked=0, Total=306 [2018-04-10 15:03:17,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 380 states. [2018-04-10 15:03:17,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 380 to 293. [2018-04-10 15:03:17,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 293 states. [2018-04-10 15:03:17,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 326 transitions. [2018-04-10 15:03:17,586 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 326 transitions. Word has length 1549 [2018-04-10 15:03:17,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:17,587 INFO L459 AbstractCegarLoop]: Abstraction has 293 states and 326 transitions. [2018-04-10 15:03:17,587 INFO L460 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-04-10 15:03:17,587 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 326 transitions. [2018-04-10 15:03:17,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1652 [2018-04-10 15:03:17,604 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:17,605 INFO L355 BasicCegarLoop]: trace histogram [256, 240, 240, 240, 240, 240, 17, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:17,605 INFO L408 AbstractCegarLoop]: === Iteration 36 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:17,605 INFO L82 PathProgramCache]: Analyzing trace with hash 1444662117, now seen corresponding path program 30 times [2018-04-10 15:03:17,606 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:17,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:17,715 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:20,816 INFO L134 CoverageAnalysis]: Checked inductivity of 181232 backedges. 62 proven. 21885 refuted. 0 times theorem prover too weak. 159285 trivial. 0 not checked. [2018-04-10 15:03:20,816 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:20,816 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-10 15:03:20,816 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:20,817 INFO L134 CoverageAnalysis]: Checked inductivity of 11520 backedges. 0 proven. 1425 refuted. 0 times theorem prover too weak. 10095 trivial. 0 not checked. [2018-04-10 15:03:20,817 INFO L182 omatonBuilderFactory]: Interpolants [11979#true, 11980#false, 11981#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 11982#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11983#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11984#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11985#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11986#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11987#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11988#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11989#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 11990#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11991#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11992#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 11993#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11994#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 11995#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11996#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 11997#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:03:20,819 INFO L134 CoverageAnalysis]: Checked inductivity of 181232 backedges. 62 proven. 21885 refuted. 0 times theorem prover too weak. 159285 trivial. 0 not checked. [2018-04-10 15:03:20,819 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-10 15:03:20,819 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-10 15:03:20,819 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=155, Invalid=187, Unknown=0, NotChecked=0, Total=342 [2018-04-10 15:03:20,819 INFO L87 Difference]: Start difference. First operand 293 states and 326 transitions. Second operand 19 states. [2018-04-10 15:03:20,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:20,909 INFO L93 Difference]: Finished difference Result 306 states and 339 transitions. [2018-04-10 15:03:20,909 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-04-10 15:03:20,909 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 1651 [2018-04-10 15:03:20,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:20,910 INFO L225 Difference]: With dead ends: 306 [2018-04-10 15:03:20,910 INFO L226 Difference]: Without dead ends: 303 [2018-04-10 15:03:20,911 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=173, Invalid=207, Unknown=0, NotChecked=0, Total=380 [2018-04-10 15:03:20,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303 states. [2018-04-10 15:03:20,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303 to 299. [2018-04-10 15:03:20,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 299 states. [2018-04-10 15:03:20,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 332 transitions. [2018-04-10 15:03:20,915 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 332 transitions. Word has length 1651 [2018-04-10 15:03:20,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:20,916 INFO L459 AbstractCegarLoop]: Abstraction has 299 states and 332 transitions. [2018-04-10 15:03:20,916 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-10 15:03:20,916 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 332 transitions. [2018-04-10 15:03:20,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1748 [2018-04-10 15:03:20,943 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:20,943 INFO L355 BasicCegarLoop]: trace histogram [272, 256, 256, 256, 256, 256, 17, 16, 16, 16, 16, 16, 16, 16, 16, 16, 16, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:20,943 INFO L408 AbstractCegarLoop]: === Iteration 37 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:20,944 INFO L82 PathProgramCache]: Analyzing trace with hash 104699365, now seen corresponding path program 31 times [2018-04-10 15:03:20,944 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:21,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:21,018 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:23,756 INFO L134 CoverageAnalysis]: Checked inductivity of 205504 backedges. 0 proven. 752 refuted. 0 times theorem prover too weak. 204752 trivial. 0 not checked. [2018-04-10 15:03:23,757 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:23,757 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2018-04-10 15:03:23,757 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:23,757 INFO L134 CoverageAnalysis]: Checked inductivity of 12240 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12240 trivial. 0 not checked. [2018-04-10 15:03:23,758 INFO L182 omatonBuilderFactory]: Interpolants [12608#(<= main_~i~1 1), 12609#(<= main_~i~1 2), 12610#(<= main_~i~1 3), 12611#(<= main_~i~1 4), 12612#(<= main_~i~1 5), 12613#(<= main_~i~1 6), 12614#(<= main_~i~1 7), 12615#(<= main_~i~1 8), 12616#(<= main_~i~1 9), 12617#(<= main_~i~1 10), 12618#(<= main_~i~1 11), 12619#(<= main_~i~1 12), 12620#(<= main_~i~1 13), 12621#(<= main_~i~1 14), 12622#(<= main_~i~1 15), 12623#(<= main_~i~1 16), 12605#true, 12606#false, 12607#(= main_~i~1 0)] [2018-04-10 15:03:23,760 INFO L134 CoverageAnalysis]: Checked inductivity of 205504 backedges. 0 proven. 752 refuted. 0 times theorem prover too weak. 204752 trivial. 0 not checked. [2018-04-10 15:03:23,760 INFO L442 AbstractCegarLoop]: Interpolant automaton has 19 states [2018-04-10 15:03:23,760 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2018-04-10 15:03:23,760 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=171, Unknown=0, NotChecked=0, Total=342 [2018-04-10 15:03:23,760 INFO L87 Difference]: Start difference. First operand 299 states and 332 transitions. Second operand 19 states. [2018-04-10 15:03:23,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:23,919 INFO L93 Difference]: Finished difference Result 402 states and 422 transitions. [2018-04-10 15:03:23,919 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-04-10 15:03:23,919 INFO L78 Accepts]: Start accepts. Automaton has 19 states. Word has length 1747 [2018-04-10 15:03:23,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:23,921 INFO L225 Difference]: With dead ends: 402 [2018-04-10 15:03:23,921 INFO L226 Difference]: Without dead ends: 402 [2018-04-10 15:03:23,921 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=171, Invalid=171, Unknown=0, NotChecked=0, Total=342 [2018-04-10 15:03:23,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 402 states. [2018-04-10 15:03:23,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 402 to 310. [2018-04-10 15:03:23,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 310 states. [2018-04-10 15:03:23,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 345 transitions. [2018-04-10 15:03:23,925 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 345 transitions. Word has length 1747 [2018-04-10 15:03:23,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:23,927 INFO L459 AbstractCegarLoop]: Abstraction has 310 states and 345 transitions. [2018-04-10 15:03:23,927 INFO L460 AbstractCegarLoop]: Interpolant automaton has 19 states. [2018-04-10 15:03:23,927 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 345 transitions. [2018-04-10 15:03:23,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1856 [2018-04-10 15:03:23,942 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:23,942 INFO L355 BasicCegarLoop]: trace histogram [289, 272, 272, 272, 272, 272, 18, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:23,943 INFO L408 AbstractCegarLoop]: === Iteration 38 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:23,943 INFO L82 PathProgramCache]: Analyzing trace with hash -553996762, now seen corresponding path program 32 times [2018-04-10 15:03:23,944 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:24,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:24,021 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:27,992 INFO L134 CoverageAnalysis]: Checked inductivity of 232050 backedges. 66 proven. 26432 refuted. 0 times theorem prover too weak. 205552 trivial. 0 not checked. [2018-04-10 15:03:27,992 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:27,993 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-10 15:03:27,993 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:27,993 INFO L134 CoverageAnalysis]: Checked inductivity of 13872 backedges. 0 proven. 1616 refuted. 0 times theorem prover too weak. 12256 trivial. 0 not checked. [2018-04-10 15:03:27,993 INFO L182 omatonBuilderFactory]: Interpolants [13344#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13345#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13346#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 13347#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13348#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13349#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 13350#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13351#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 13352#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13353#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13354#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13355#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 13336#true, 13337#false, 13338#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 13339#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13340#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13341#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13342#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 13343#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))))] [2018-04-10 15:03:27,996 INFO L134 CoverageAnalysis]: Checked inductivity of 232050 backedges. 66 proven. 26432 refuted. 0 times theorem prover too weak. 205552 trivial. 0 not checked. [2018-04-10 15:03:27,996 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-10 15:03:27,997 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-10 15:03:27,997 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=173, Invalid=207, Unknown=0, NotChecked=0, Total=380 [2018-04-10 15:03:27,997 INFO L87 Difference]: Start difference. First operand 310 states and 345 transitions. Second operand 20 states. [2018-04-10 15:03:28,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:28,082 INFO L93 Difference]: Finished difference Result 323 states and 358 transitions. [2018-04-10 15:03:28,083 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-04-10 15:03:28,083 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1855 [2018-04-10 15:03:28,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:28,084 INFO L225 Difference]: With dead ends: 323 [2018-04-10 15:03:28,084 INFO L226 Difference]: Without dead ends: 320 [2018-04-10 15:03:28,085 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=192, Invalid=228, Unknown=0, NotChecked=0, Total=420 [2018-04-10 15:03:28,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2018-04-10 15:03:28,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 316. [2018-04-10 15:03:28,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 316 states. [2018-04-10 15:03:28,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 351 transitions. [2018-04-10 15:03:28,089 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 351 transitions. Word has length 1855 [2018-04-10 15:03:28,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:28,090 INFO L459 AbstractCegarLoop]: Abstraction has 316 states and 351 transitions. [2018-04-10 15:03:28,090 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-10 15:03:28,090 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 351 transitions. [2018-04-10 15:03:28,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 1958 [2018-04-10 15:03:28,106 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:28,106 INFO L355 BasicCegarLoop]: trace histogram [306, 289, 289, 289, 289, 289, 18, 17, 17, 17, 17, 17, 17, 17, 17, 17, 17, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:28,106 INFO L408 AbstractCegarLoop]: === Iteration 39 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:28,107 INFO L82 PathProgramCache]: Analyzing trace with hash 546860014, now seen corresponding path program 33 times [2018-04-10 15:03:28,107 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:28,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:28,205 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:31,763 INFO L134 CoverageAnalysis]: Checked inductivity of 261188 backedges. 0 proven. 850 refuted. 0 times theorem prover too weak. 260338 trivial. 0 not checked. [2018-04-10 15:03:31,763 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:31,764 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2018-04-10 15:03:31,764 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:31,764 INFO L134 CoverageAnalysis]: Checked inductivity of 14688 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 14688 trivial. 0 not checked. [2018-04-10 15:03:31,764 INFO L182 omatonBuilderFactory]: Interpolants [14016#(<= main_~i~1 17), 13997#true, 13998#false, 13999#(= main_~i~1 0), 14000#(<= main_~i~1 1), 14001#(<= main_~i~1 2), 14002#(<= main_~i~1 3), 14003#(<= main_~i~1 4), 14004#(<= main_~i~1 5), 14005#(<= main_~i~1 6), 14006#(<= main_~i~1 7), 14007#(<= main_~i~1 8), 14008#(<= main_~i~1 9), 14009#(<= main_~i~1 10), 14010#(<= main_~i~1 11), 14011#(<= main_~i~1 12), 14012#(<= main_~i~1 13), 14013#(<= main_~i~1 14), 14014#(<= main_~i~1 15), 14015#(<= main_~i~1 16)] [2018-04-10 15:03:31,767 INFO L134 CoverageAnalysis]: Checked inductivity of 261188 backedges. 0 proven. 850 refuted. 0 times theorem prover too weak. 260338 trivial. 0 not checked. [2018-04-10 15:03:31,767 INFO L442 AbstractCegarLoop]: Interpolant automaton has 20 states [2018-04-10 15:03:31,767 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2018-04-10 15:03:31,767 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=190, Unknown=0, NotChecked=0, Total=380 [2018-04-10 15:03:31,767 INFO L87 Difference]: Start difference. First operand 316 states and 351 transitions. Second operand 20 states. [2018-04-10 15:03:31,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:31,906 INFO L93 Difference]: Finished difference Result 424 states and 445 transitions. [2018-04-10 15:03:31,906 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-04-10 15:03:31,906 INFO L78 Accepts]: Start accepts. Automaton has 20 states. Word has length 1957 [2018-04-10 15:03:31,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:31,908 INFO L225 Difference]: With dead ends: 424 [2018-04-10 15:03:31,908 INFO L226 Difference]: Without dead ends: 424 [2018-04-10 15:03:31,908 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=190, Invalid=190, Unknown=0, NotChecked=0, Total=380 [2018-04-10 15:03:31,909 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 424 states. [2018-04-10 15:03:31,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 424 to 327. [2018-04-10 15:03:31,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 327 states. [2018-04-10 15:03:31,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 364 transitions. [2018-04-10 15:03:31,912 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 364 transitions. Word has length 1957 [2018-04-10 15:03:31,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:31,912 INFO L459 AbstractCegarLoop]: Abstraction has 327 states and 364 transitions. [2018-04-10 15:03:31,913 INFO L460 AbstractCegarLoop]: Interpolant automaton has 20 states. [2018-04-10 15:03:31,913 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 364 transitions. [2018-04-10 15:03:31,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2072 [2018-04-10 15:03:31,929 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:31,930 INFO L355 BasicCegarLoop]: trace histogram [324, 306, 306, 306, 306, 306, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:31,930 INFO L408 AbstractCegarLoop]: === Iteration 40 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:31,930 INFO L82 PathProgramCache]: Analyzing trace with hash -1829676233, now seen corresponding path program 34 times [2018-04-10 15:03:31,931 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:32,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:32,020 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:37,058 INFO L134 CoverageAnalysis]: Checked inductivity of 292878 backedges. 70 proven. 31569 refuted. 0 times theorem prover too weak. 261239 trivial. 0 not checked. [2018-04-10 15:03:37,058 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:37,058 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-10 15:03:37,058 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:37,059 INFO L134 CoverageAnalysis]: Checked inductivity of 16524 backedges. 0 proven. 1819 refuted. 0 times theorem prover too weak. 14705 trivial. 0 not checked. [2018-04-10 15:03:37,059 INFO L182 omatonBuilderFactory]: Interpolants [14784#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14785#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14786#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14787#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14788#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 14768#true, 14769#false, 14770#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 14771#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14772#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14773#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14774#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14775#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14776#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14777#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14778#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 14779#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14780#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14781#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 14782#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 14783#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)))] [2018-04-10 15:03:37,062 INFO L134 CoverageAnalysis]: Checked inductivity of 292878 backedges. 70 proven. 31569 refuted. 0 times theorem prover too weak. 261239 trivial. 0 not checked. [2018-04-10 15:03:37,062 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-10 15:03:37,062 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-10 15:03:37,063 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=192, Invalid=228, Unknown=0, NotChecked=0, Total=420 [2018-04-10 15:03:37,063 INFO L87 Difference]: Start difference. First operand 327 states and 364 transitions. Second operand 21 states. [2018-04-10 15:03:37,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:37,143 INFO L93 Difference]: Finished difference Result 340 states and 377 transitions. [2018-04-10 15:03:37,143 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-10 15:03:37,144 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 2071 [2018-04-10 15:03:37,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:37,144 INFO L225 Difference]: With dead ends: 340 [2018-04-10 15:03:37,144 INFO L226 Difference]: Without dead ends: 337 [2018-04-10 15:03:37,145 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=212, Invalid=250, Unknown=0, NotChecked=0, Total=462 [2018-04-10 15:03:37,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2018-04-10 15:03:37,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 333. [2018-04-10 15:03:37,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 333 states. [2018-04-10 15:03:37,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 333 states to 333 states and 370 transitions. [2018-04-10 15:03:37,149 INFO L78 Accepts]: Start accepts. Automaton has 333 states and 370 transitions. Word has length 2071 [2018-04-10 15:03:37,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:37,149 INFO L459 AbstractCegarLoop]: Abstraction has 333 states and 370 transitions. [2018-04-10 15:03:37,149 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-10 15:03:37,149 INFO L276 IsEmpty]: Start isEmpty. Operand 333 states and 370 transitions. [2018-04-10 15:03:37,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2180 [2018-04-10 15:03:37,170 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:37,171 INFO L355 BasicCegarLoop]: trace histogram [342, 324, 324, 324, 324, 324, 19, 18, 18, 18, 18, 18, 18, 18, 18, 18, 18, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:37,171 INFO L408 AbstractCegarLoop]: === Iteration 41 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:37,171 INFO L82 PathProgramCache]: Analyzing trace with hash 771837319, now seen corresponding path program 35 times [2018-04-10 15:03:37,171 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:37,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:37,280 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:41,856 INFO L134 CoverageAnalysis]: Checked inductivity of 327492 backedges. 0 proven. 954 refuted. 0 times theorem prover too weak. 326538 trivial. 0 not checked. [2018-04-10 15:03:41,856 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:41,857 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2018-04-10 15:03:41,857 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:41,857 INFO L134 CoverageAnalysis]: Checked inductivity of 17442 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 17442 trivial. 0 not checked. [2018-04-10 15:03:41,857 INFO L182 omatonBuilderFactory]: Interpolants [15464#true, 15465#false, 15466#(= main_~i~1 0), 15467#(<= main_~i~1 1), 15468#(<= main_~i~1 2), 15469#(<= main_~i~1 3), 15470#(<= main_~i~1 4), 15471#(<= main_~i~1 5), 15472#(<= main_~i~1 6), 15473#(<= main_~i~1 7), 15474#(<= main_~i~1 8), 15475#(<= main_~i~1 9), 15476#(<= main_~i~1 10), 15477#(<= main_~i~1 11), 15478#(<= main_~i~1 12), 15479#(<= main_~i~1 13), 15480#(<= main_~i~1 14), 15481#(<= main_~i~1 15), 15482#(<= main_~i~1 16), 15483#(<= main_~i~1 17), 15484#(<= main_~i~1 18)] [2018-04-10 15:03:41,860 INFO L134 CoverageAnalysis]: Checked inductivity of 327492 backedges. 0 proven. 954 refuted. 0 times theorem prover too weak. 326538 trivial. 0 not checked. [2018-04-10 15:03:41,861 INFO L442 AbstractCegarLoop]: Interpolant automaton has 21 states [2018-04-10 15:03:41,861 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2018-04-10 15:03:41,861 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=210, Invalid=210, Unknown=0, NotChecked=0, Total=420 [2018-04-10 15:03:41,861 INFO L87 Difference]: Start difference. First operand 333 states and 370 transitions. Second operand 21 states. [2018-04-10 15:03:42,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:42,078 INFO L93 Difference]: Finished difference Result 446 states and 468 transitions. [2018-04-10 15:03:42,078 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-04-10 15:03:42,078 INFO L78 Accepts]: Start accepts. Automaton has 21 states. Word has length 2179 [2018-04-10 15:03:42,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:42,080 INFO L225 Difference]: With dead ends: 446 [2018-04-10 15:03:42,080 INFO L226 Difference]: Without dead ends: 446 [2018-04-10 15:03:42,081 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=210, Invalid=210, Unknown=0, NotChecked=0, Total=420 [2018-04-10 15:03:42,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2018-04-10 15:03:42,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 344. [2018-04-10 15:03:42,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 344 states. [2018-04-10 15:03:42,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 383 transitions. [2018-04-10 15:03:42,084 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 383 transitions. Word has length 2179 [2018-04-10 15:03:42,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:42,085 INFO L459 AbstractCegarLoop]: Abstraction has 344 states and 383 transitions. [2018-04-10 15:03:42,085 INFO L460 AbstractCegarLoop]: Interpolant automaton has 21 states. [2018-04-10 15:03:42,085 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 383 transitions. [2018-04-10 15:03:42,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2300 [2018-04-10 15:03:42,105 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:42,106 INFO L355 BasicCegarLoop]: trace histogram [361, 342, 342, 342, 342, 342, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:42,106 INFO L408 AbstractCegarLoop]: === Iteration 42 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:42,106 INFO L82 PathProgramCache]: Analyzing trace with hash 1752930392, now seen corresponding path program 36 times [2018-04-10 15:03:42,107 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:42,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:42,212 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:48,630 INFO L134 CoverageAnalysis]: Checked inductivity of 364952 backedges. 74 proven. 37332 refuted. 0 times theorem prover too weak. 327546 trivial. 0 not checked. [2018-04-10 15:03:48,630 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:48,631 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-10 15:03:48,631 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:48,631 INFO L134 CoverageAnalysis]: Checked inductivity of 19494 backedges. 0 proven. 2034 refuted. 0 times theorem prover too weak. 17460 trivial. 0 not checked. [2018-04-10 15:03:48,631 INFO L182 omatonBuilderFactory]: Interpolants [16288#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 16289#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16290#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 16291#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16292#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16293#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16294#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16295#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 18) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 16296#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 16275#true, 16276#false, 16277#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 16278#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16279#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16280#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16281#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16282#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16283#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16284#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16285#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 16286#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 16287#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))))] [2018-04-10 15:03:48,635 INFO L134 CoverageAnalysis]: Checked inductivity of 364952 backedges. 74 proven. 37332 refuted. 0 times theorem prover too weak. 327546 trivial. 0 not checked. [2018-04-10 15:03:48,635 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-10 15:03:48,636 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-10 15:03:48,636 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=212, Invalid=250, Unknown=0, NotChecked=0, Total=462 [2018-04-10 15:03:48,636 INFO L87 Difference]: Start difference. First operand 344 states and 383 transitions. Second operand 22 states. [2018-04-10 15:03:48,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:48,727 INFO L93 Difference]: Finished difference Result 357 states and 396 transitions. [2018-04-10 15:03:48,728 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2018-04-10 15:03:48,728 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 2299 [2018-04-10 15:03:48,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:48,730 INFO L225 Difference]: With dead ends: 357 [2018-04-10 15:03:48,730 INFO L226 Difference]: Without dead ends: 354 [2018-04-10 15:03:48,730 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=233, Invalid=273, Unknown=0, NotChecked=0, Total=506 [2018-04-10 15:03:48,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354 states. [2018-04-10 15:03:48,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354 to 350. [2018-04-10 15:03:48,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 350 states. [2018-04-10 15:03:48,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 389 transitions. [2018-04-10 15:03:48,735 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 389 transitions. Word has length 2299 [2018-04-10 15:03:48,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:48,736 INFO L459 AbstractCegarLoop]: Abstraction has 350 states and 389 transitions. [2018-04-10 15:03:48,736 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-10 15:03:48,736 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 389 transitions. [2018-04-10 15:03:48,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2414 [2018-04-10 15:03:48,759 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:48,760 INFO L355 BasicCegarLoop]: trace histogram [380, 361, 361, 361, 361, 361, 20, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:48,760 INFO L408 AbstractCegarLoop]: === Iteration 43 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:48,760 INFO L82 PathProgramCache]: Analyzing trace with hash 760102000, now seen corresponding path program 37 times [2018-04-10 15:03:48,761 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:48,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:48,866 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:03:54,731 INFO L134 CoverageAnalysis]: Checked inductivity of 405688 backedges. 0 proven. 1064 refuted. 0 times theorem prover too weak. 404624 trivial. 0 not checked. [2018-04-10 15:03:54,731 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:03:54,732 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2018-04-10 15:03:54,732 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:03:54,732 INFO L134 CoverageAnalysis]: Checked inductivity of 20520 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 20520 trivial. 0 not checked. [2018-04-10 15:03:54,732 INFO L182 omatonBuilderFactory]: Interpolants [17024#(<= main_~i~1 16), 17025#(<= main_~i~1 17), 17026#(<= main_~i~1 18), 17027#(<= main_~i~1 19), 17006#true, 17007#false, 17008#(= main_~i~1 0), 17009#(<= main_~i~1 1), 17010#(<= main_~i~1 2), 17011#(<= main_~i~1 3), 17012#(<= main_~i~1 4), 17013#(<= main_~i~1 5), 17014#(<= main_~i~1 6), 17015#(<= main_~i~1 7), 17016#(<= main_~i~1 8), 17017#(<= main_~i~1 9), 17018#(<= main_~i~1 10), 17019#(<= main_~i~1 11), 17020#(<= main_~i~1 12), 17021#(<= main_~i~1 13), 17022#(<= main_~i~1 14), 17023#(<= main_~i~1 15)] [2018-04-10 15:03:54,736 INFO L134 CoverageAnalysis]: Checked inductivity of 405688 backedges. 0 proven. 1064 refuted. 0 times theorem prover too weak. 404624 trivial. 0 not checked. [2018-04-10 15:03:54,736 INFO L442 AbstractCegarLoop]: Interpolant automaton has 22 states [2018-04-10 15:03:54,736 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2018-04-10 15:03:54,737 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=231, Invalid=231, Unknown=0, NotChecked=0, Total=462 [2018-04-10 15:03:54,737 INFO L87 Difference]: Start difference. First operand 350 states and 389 transitions. Second operand 22 states. [2018-04-10 15:03:54,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:03:54,896 INFO L93 Difference]: Finished difference Result 468 states and 491 transitions. [2018-04-10 15:03:54,896 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2018-04-10 15:03:54,896 INFO L78 Accepts]: Start accepts. Automaton has 22 states. Word has length 2413 [2018-04-10 15:03:54,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:03:54,899 INFO L225 Difference]: With dead ends: 468 [2018-04-10 15:03:54,899 INFO L226 Difference]: Without dead ends: 468 [2018-04-10 15:03:54,899 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=231, Invalid=231, Unknown=0, NotChecked=0, Total=462 [2018-04-10 15:03:54,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2018-04-10 15:03:54,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 361. [2018-04-10 15:03:54,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 361 states. [2018-04-10 15:03:54,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 361 states to 361 states and 402 transitions. [2018-04-10 15:03:54,904 INFO L78 Accepts]: Start accepts. Automaton has 361 states and 402 transitions. Word has length 2413 [2018-04-10 15:03:54,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:03:54,905 INFO L459 AbstractCegarLoop]: Abstraction has 361 states and 402 transitions. [2018-04-10 15:03:54,905 INFO L460 AbstractCegarLoop]: Interpolant automaton has 22 states. [2018-04-10 15:03:54,905 INFO L276 IsEmpty]: Start isEmpty. Operand 361 states and 402 transitions. [2018-04-10 15:03:54,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2540 [2018-04-10 15:03:54,929 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:03:54,929 INFO L355 BasicCegarLoop]: trace histogram [400, 380, 380, 380, 380, 380, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:03:54,930 INFO L408 AbstractCegarLoop]: === Iteration 44 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:03:54,930 INFO L82 PathProgramCache]: Analyzing trace with hash 1154073417, now seen corresponding path program 38 times [2018-04-10 15:03:54,930 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:03:55,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:03:55,045 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:04:03,020 INFO L134 CoverageAnalysis]: Checked inductivity of 449580 backedges. 78 proven. 43757 refuted. 0 times theorem prover too weak. 405745 trivial. 0 not checked. [2018-04-10 15:04:03,021 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:04:03,021 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-10 15:04:03,021 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:04:03,022 INFO L134 CoverageAnalysis]: Checked inductivity of 22800 backedges. 0 proven. 2261 refuted. 0 times theorem prover too weak. 20539 trivial. 0 not checked. [2018-04-10 15:04:03,022 INFO L182 omatonBuilderFactory]: Interpolants [17857#true, 17858#false, 17859#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 17860#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17861#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17862#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17863#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17864#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17865#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17866#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17867#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 17868#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17869#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17870#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 17871#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17872#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 17873#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17874#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17875#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17876#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17877#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 18) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 17878#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 19) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 17879#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:04:03,027 INFO L134 CoverageAnalysis]: Checked inductivity of 449580 backedges. 78 proven. 43757 refuted. 0 times theorem prover too weak. 405745 trivial. 0 not checked. [2018-04-10 15:04:03,027 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-10 15:04:03,027 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-10 15:04:03,027 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=233, Invalid=273, Unknown=0, NotChecked=0, Total=506 [2018-04-10 15:04:03,027 INFO L87 Difference]: Start difference. First operand 361 states and 402 transitions. Second operand 23 states. [2018-04-10 15:04:03,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:04:03,140 INFO L93 Difference]: Finished difference Result 374 states and 415 transitions. [2018-04-10 15:04:03,141 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-04-10 15:04:03,141 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 2539 [2018-04-10 15:04:03,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:04:03,142 INFO L225 Difference]: With dead ends: 374 [2018-04-10 15:04:03,142 INFO L226 Difference]: Without dead ends: 371 [2018-04-10 15:04:03,142 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=255, Invalid=297, Unknown=0, NotChecked=0, Total=552 [2018-04-10 15:04:03,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2018-04-10 15:04:03,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 367. [2018-04-10 15:04:03,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 367 states. [2018-04-10 15:04:03,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 367 states to 367 states and 408 transitions. [2018-04-10 15:04:03,146 INFO L78 Accepts]: Start accepts. Automaton has 367 states and 408 transitions. Word has length 2539 [2018-04-10 15:04:03,146 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:04:03,146 INFO L459 AbstractCegarLoop]: Abstraction has 367 states and 408 transitions. [2018-04-10 15:04:03,146 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-10 15:04:03,146 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 408 transitions. [2018-04-10 15:04:03,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2660 [2018-04-10 15:04:03,173 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:04:03,174 INFO L355 BasicCegarLoop]: trace histogram [420, 400, 400, 400, 400, 400, 21, 20, 20, 20, 20, 20, 20, 20, 20, 20, 20, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:04:03,174 INFO L408 AbstractCegarLoop]: === Iteration 45 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:04:03,175 INFO L82 PathProgramCache]: Analyzing trace with hash -1105702295, now seen corresponding path program 39 times [2018-04-10 15:04:03,175 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:04:03,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:04:03,303 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:04:10,539 INFO L134 CoverageAnalysis]: Checked inductivity of 497120 backedges. 0 proven. 1180 refuted. 0 times theorem prover too weak. 495940 trivial. 0 not checked. [2018-04-10 15:04:10,539 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:04:10,540 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2018-04-10 15:04:10,540 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:04:10,540 INFO L134 CoverageAnalysis]: Checked inductivity of 23940 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 23940 trivial. 0 not checked. [2018-04-10 15:04:10,541 INFO L182 omatonBuilderFactory]: Interpolants [18624#false, 18625#(= main_~i~1 0), 18626#(<= main_~i~1 1), 18627#(<= main_~i~1 2), 18628#(<= main_~i~1 3), 18629#(<= main_~i~1 4), 18630#(<= main_~i~1 5), 18631#(<= main_~i~1 6), 18632#(<= main_~i~1 7), 18633#(<= main_~i~1 8), 18634#(<= main_~i~1 9), 18635#(<= main_~i~1 10), 18636#(<= main_~i~1 11), 18637#(<= main_~i~1 12), 18638#(<= main_~i~1 13), 18639#(<= main_~i~1 14), 18640#(<= main_~i~1 15), 18641#(<= main_~i~1 16), 18642#(<= main_~i~1 17), 18643#(<= main_~i~1 18), 18644#(<= main_~i~1 19), 18645#(<= main_~i~1 20), 18623#true] [2018-04-10 15:04:10,545 INFO L134 CoverageAnalysis]: Checked inductivity of 497120 backedges. 0 proven. 1180 refuted. 0 times theorem prover too weak. 495940 trivial. 0 not checked. [2018-04-10 15:04:10,545 INFO L442 AbstractCegarLoop]: Interpolant automaton has 23 states [2018-04-10 15:04:10,545 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2018-04-10 15:04:10,545 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=253, Unknown=0, NotChecked=0, Total=506 [2018-04-10 15:04:10,545 INFO L87 Difference]: Start difference. First operand 367 states and 408 transitions. Second operand 23 states. [2018-04-10 15:04:10,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:04:10,744 INFO L93 Difference]: Finished difference Result 490 states and 514 transitions. [2018-04-10 15:04:10,744 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-04-10 15:04:10,744 INFO L78 Accepts]: Start accepts. Automaton has 23 states. Word has length 2659 [2018-04-10 15:04:10,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:04:10,747 INFO L225 Difference]: With dead ends: 490 [2018-04-10 15:04:10,747 INFO L226 Difference]: Without dead ends: 490 [2018-04-10 15:04:10,747 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=253, Invalid=253, Unknown=0, NotChecked=0, Total=506 [2018-04-10 15:04:10,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 490 states. [2018-04-10 15:04:10,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 490 to 378. [2018-04-10 15:04:10,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 378 states. [2018-04-10 15:04:10,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 421 transitions. [2018-04-10 15:04:10,752 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 421 transitions. Word has length 2659 [2018-04-10 15:04:10,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:04:10,753 INFO L459 AbstractCegarLoop]: Abstraction has 378 states and 421 transitions. [2018-04-10 15:04:10,753 INFO L460 AbstractCegarLoop]: Interpolant automaton has 23 states. [2018-04-10 15:04:10,754 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 421 transitions. [2018-04-10 15:04:10,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2792 [2018-04-10 15:04:10,793 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:04:10,793 INFO L355 BasicCegarLoop]: trace histogram [441, 420, 420, 420, 420, 420, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:04:10,793 INFO L408 AbstractCegarLoop]: === Iteration 46 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:04:10,794 INFO L82 PathProgramCache]: Analyzing trace with hash -737668662, now seen corresponding path program 40 times [2018-04-10 15:04:10,794 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:04:10,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:04:10,929 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:04:20,607 INFO L134 CoverageAnalysis]: Checked inductivity of 548142 backedges. 82 proven. 50880 refuted. 0 times theorem prover too weak. 497180 trivial. 0 not checked. [2018-04-10 15:04:20,607 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:04:20,607 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-10 15:04:20,607 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:04:20,608 INFO L134 CoverageAnalysis]: Checked inductivity of 26460 backedges. 0 proven. 2500 refuted. 0 times theorem prover too weak. 23960 trivial. 0 not checked. [2018-04-10 15:04:20,608 INFO L182 omatonBuilderFactory]: Interpolants [19520#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19521#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19522#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19523#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19524#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 19525#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19526#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19527#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 19528#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19529#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 19530#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19531#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19532#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19533#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19534#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 18) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 19535#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 19) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19536#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 20) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19537#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 19514#true, 19515#false, 19516#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 19517#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19518#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 19519#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))))] [2018-04-10 15:04:20,614 INFO L134 CoverageAnalysis]: Checked inductivity of 548142 backedges. 82 proven. 50880 refuted. 0 times theorem prover too weak. 497180 trivial. 0 not checked. [2018-04-10 15:04:20,614 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-10 15:04:20,614 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-10 15:04:20,614 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=255, Invalid=297, Unknown=0, NotChecked=0, Total=552 [2018-04-10 15:04:20,614 INFO L87 Difference]: Start difference. First operand 378 states and 421 transitions. Second operand 24 states. [2018-04-10 15:04:20,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:04:20,733 INFO L93 Difference]: Finished difference Result 391 states and 434 transitions. [2018-04-10 15:04:20,734 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2018-04-10 15:04:20,734 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 2791 [2018-04-10 15:04:20,734 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:04:20,735 INFO L225 Difference]: With dead ends: 391 [2018-04-10 15:04:20,735 INFO L226 Difference]: Without dead ends: 388 [2018-04-10 15:04:20,736 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=278, Invalid=322, Unknown=0, NotChecked=0, Total=600 [2018-04-10 15:04:20,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 388 states. [2018-04-10 15:04:20,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 388 to 384. [2018-04-10 15:04:20,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 384 states. [2018-04-10 15:04:20,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 384 states to 384 states and 427 transitions. [2018-04-10 15:04:20,740 INFO L78 Accepts]: Start accepts. Automaton has 384 states and 427 transitions. Word has length 2791 [2018-04-10 15:04:20,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:04:20,740 INFO L459 AbstractCegarLoop]: Abstraction has 384 states and 427 transitions. [2018-04-10 15:04:20,740 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-10 15:04:20,741 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 427 transitions. [2018-04-10 15:04:20,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 2918 [2018-04-10 15:04:20,781 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:04:20,782 INFO L355 BasicCegarLoop]: trace histogram [462, 441, 441, 441, 441, 441, 22, 21, 21, 21, 21, 21, 21, 21, 21, 21, 21, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:04:20,782 INFO L408 AbstractCegarLoop]: === Iteration 47 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:04:20,782 INFO L82 PathProgramCache]: Analyzing trace with hash -180289230, now seen corresponding path program 41 times [2018-04-10 15:04:20,783 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:04:20,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:04:20,924 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:04:29,932 INFO L134 CoverageAnalysis]: Checked inductivity of 603204 backedges. 0 proven. 1302 refuted. 0 times theorem prover too weak. 601902 trivial. 0 not checked. [2018-04-10 15:04:29,933 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:04:29,933 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2018-04-10 15:04:29,933 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:04:29,934 INFO L134 CoverageAnalysis]: Checked inductivity of 27720 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 27720 trivial. 0 not checked. [2018-04-10 15:04:29,934 INFO L182 omatonBuilderFactory]: Interpolants [20320#(<= main_~i~1 3), 20321#(<= main_~i~1 4), 20322#(<= main_~i~1 5), 20323#(<= main_~i~1 6), 20324#(<= main_~i~1 7), 20325#(<= main_~i~1 8), 20326#(<= main_~i~1 9), 20327#(<= main_~i~1 10), 20328#(<= main_~i~1 11), 20329#(<= main_~i~1 12), 20330#(<= main_~i~1 13), 20331#(<= main_~i~1 14), 20332#(<= main_~i~1 15), 20333#(<= main_~i~1 16), 20334#(<= main_~i~1 17), 20335#(<= main_~i~1 18), 20336#(<= main_~i~1 19), 20337#(<= main_~i~1 20), 20338#(<= main_~i~1 21), 20315#true, 20316#false, 20317#(= main_~i~1 0), 20318#(<= main_~i~1 1), 20319#(<= main_~i~1 2)] [2018-04-10 15:04:29,939 INFO L134 CoverageAnalysis]: Checked inductivity of 603204 backedges. 0 proven. 1302 refuted. 0 times theorem prover too weak. 601902 trivial. 0 not checked. [2018-04-10 15:04:29,940 INFO L442 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-04-10 15:04:29,940 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-04-10 15:04:29,940 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=276, Invalid=276, Unknown=0, NotChecked=0, Total=552 [2018-04-10 15:04:29,940 INFO L87 Difference]: Start difference. First operand 384 states and 427 transitions. Second operand 24 states. [2018-04-10 15:04:30,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:04:30,140 INFO L93 Difference]: Finished difference Result 512 states and 537 transitions. [2018-04-10 15:04:30,140 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2018-04-10 15:04:30,140 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 2917 [2018-04-10 15:04:30,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:04:30,142 INFO L225 Difference]: With dead ends: 512 [2018-04-10 15:04:30,142 INFO L226 Difference]: Without dead ends: 512 [2018-04-10 15:04:30,142 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=276, Invalid=276, Unknown=0, NotChecked=0, Total=552 [2018-04-10 15:04:30,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 512 states. [2018-04-10 15:04:30,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 512 to 395. [2018-04-10 15:04:30,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 395 states. [2018-04-10 15:04:30,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 395 states to 395 states and 440 transitions. [2018-04-10 15:04:30,147 INFO L78 Accepts]: Start accepts. Automaton has 395 states and 440 transitions. Word has length 2917 [2018-04-10 15:04:30,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:04:30,149 INFO L459 AbstractCegarLoop]: Abstraction has 395 states and 440 transitions. [2018-04-10 15:04:30,149 INFO L460 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-04-10 15:04:30,149 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 440 transitions. [2018-04-10 15:04:30,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3056 [2018-04-10 15:04:30,182 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:04:30,182 INFO L355 BasicCegarLoop]: trace histogram [484, 462, 462, 462, 462, 462, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:04:30,183 INFO L408 AbstractCegarLoop]: === Iteration 48 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:04:30,183 INFO L82 PathProgramCache]: Analyzing trace with hash -1406021221, now seen corresponding path program 42 times [2018-04-10 15:04:30,183 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:04:30,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:04:30,323 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:04:42,231 INFO L134 CoverageAnalysis]: Checked inductivity of 662090 backedges. 86 proven. 58737 refuted. 0 times theorem prover too weak. 603267 trivial. 0 not checked. [2018-04-10 15:04:42,232 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:04:42,232 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-10 15:04:42,232 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:04:42,233 INFO L134 CoverageAnalysis]: Checked inductivity of 30492 backedges. 0 proven. 2751 refuted. 0 times theorem prover too weak. 27741 trivial. 0 not checked. [2018-04-10 15:04:42,233 INFO L182 omatonBuilderFactory]: Interpolants [21248#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 21249#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21250#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21251#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21252#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21253#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21254#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21255#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21256#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 21257#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21258#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21259#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 21260#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21261#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 21262#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21263#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21264#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21265#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21266#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 18) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 21267#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 19) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21268#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 20) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21269#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 21) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 21270#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 21246#true, 21247#false] [2018-04-10 15:04:42,239 INFO L134 CoverageAnalysis]: Checked inductivity of 662090 backedges. 86 proven. 58737 refuted. 0 times theorem prover too weak. 603267 trivial. 0 not checked. [2018-04-10 15:04:42,239 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-10 15:04:42,239 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-10 15:04:42,239 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=278, Invalid=322, Unknown=0, NotChecked=0, Total=600 [2018-04-10 15:04:42,239 INFO L87 Difference]: Start difference. First operand 395 states and 440 transitions. Second operand 25 states. [2018-04-10 15:04:42,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:04:42,342 INFO L93 Difference]: Finished difference Result 408 states and 453 transitions. [2018-04-10 15:04:42,342 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-04-10 15:04:42,343 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 3055 [2018-04-10 15:04:42,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:04:42,344 INFO L225 Difference]: With dead ends: 408 [2018-04-10 15:04:42,344 INFO L226 Difference]: Without dead ends: 405 [2018-04-10 15:04:42,344 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=302, Invalid=348, Unknown=0, NotChecked=0, Total=650 [2018-04-10 15:04:42,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 405 states. [2018-04-10 15:04:42,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 405 to 401. [2018-04-10 15:04:42,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 401 states. [2018-04-10 15:04:42,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 401 states to 401 states and 446 transitions. [2018-04-10 15:04:42,348 INFO L78 Accepts]: Start accepts. Automaton has 401 states and 446 transitions. Word has length 3055 [2018-04-10 15:04:42,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:04:42,349 INFO L459 AbstractCegarLoop]: Abstraction has 401 states and 446 transitions. [2018-04-10 15:04:42,349 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-10 15:04:42,349 INFO L276 IsEmpty]: Start isEmpty. Operand 401 states and 446 transitions. [2018-04-10 15:04:42,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3188 [2018-04-10 15:04:42,387 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:04:42,388 INFO L355 BasicCegarLoop]: trace histogram [506, 484, 484, 484, 484, 484, 23, 22, 22, 22, 22, 22, 22, 22, 22, 22, 22, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:04:42,388 INFO L408 AbstractCegarLoop]: === Iteration 49 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:04:42,388 INFO L82 PathProgramCache]: Analyzing trace with hash -1215606133, now seen corresponding path program 43 times [2018-04-10 15:04:42,389 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:04:42,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:04:42,543 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:04:53,577 INFO L134 CoverageAnalysis]: Checked inductivity of 725428 backedges. 0 proven. 1430 refuted. 0 times theorem prover too weak. 723998 trivial. 0 not checked. [2018-04-10 15:04:53,577 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:04:53,578 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2018-04-10 15:04:53,578 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:04:53,578 INFO L134 CoverageAnalysis]: Checked inductivity of 31878 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 31878 trivial. 0 not checked. [2018-04-10 15:04:53,578 INFO L182 omatonBuilderFactory]: Interpolants [22082#true, 22083#false, 22084#(= main_~i~1 0), 22085#(<= main_~i~1 1), 22086#(<= main_~i~1 2), 22087#(<= main_~i~1 3), 22088#(<= main_~i~1 4), 22089#(<= main_~i~1 5), 22090#(<= main_~i~1 6), 22091#(<= main_~i~1 7), 22092#(<= main_~i~1 8), 22093#(<= main_~i~1 9), 22094#(<= main_~i~1 10), 22095#(<= main_~i~1 11), 22096#(<= main_~i~1 12), 22097#(<= main_~i~1 13), 22098#(<= main_~i~1 14), 22099#(<= main_~i~1 15), 22100#(<= main_~i~1 16), 22101#(<= main_~i~1 17), 22102#(<= main_~i~1 18), 22103#(<= main_~i~1 19), 22104#(<= main_~i~1 20), 22105#(<= main_~i~1 21), 22106#(<= main_~i~1 22)] [2018-04-10 15:04:53,585 INFO L134 CoverageAnalysis]: Checked inductivity of 725428 backedges. 0 proven. 1430 refuted. 0 times theorem prover too weak. 723998 trivial. 0 not checked. [2018-04-10 15:04:53,585 INFO L442 AbstractCegarLoop]: Interpolant automaton has 25 states [2018-04-10 15:04:53,585 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2018-04-10 15:04:53,585 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=300, Unknown=0, NotChecked=0, Total=600 [2018-04-10 15:04:53,585 INFO L87 Difference]: Start difference. First operand 401 states and 446 transitions. Second operand 25 states. [2018-04-10 15:04:53,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:04:53,829 INFO L93 Difference]: Finished difference Result 534 states and 560 transitions. [2018-04-10 15:04:53,829 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2018-04-10 15:04:53,829 INFO L78 Accepts]: Start accepts. Automaton has 25 states. Word has length 3187 [2018-04-10 15:04:53,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:04:53,832 INFO L225 Difference]: With dead ends: 534 [2018-04-10 15:04:53,832 INFO L226 Difference]: Without dead ends: 534 [2018-04-10 15:04:53,832 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=300, Invalid=300, Unknown=0, NotChecked=0, Total=600 [2018-04-10 15:04:53,833 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 534 states. [2018-04-10 15:04:53,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 534 to 412. [2018-04-10 15:04:53,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 412 states. [2018-04-10 15:04:53,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 459 transitions. [2018-04-10 15:04:53,837 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 459 transitions. Word has length 3187 [2018-04-10 15:04:53,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:04:53,838 INFO L459 AbstractCegarLoop]: Abstraction has 412 states and 459 transitions. [2018-04-10 15:04:53,838 INFO L460 AbstractCegarLoop]: Interpolant automaton has 25 states. [2018-04-10 15:04:53,838 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 459 transitions. [2018-04-10 15:04:53,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3332 [2018-04-10 15:04:53,880 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:04:53,880 INFO L355 BasicCegarLoop]: trace histogram [529, 506, 506, 506, 506, 506, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:04:53,880 INFO L408 AbstractCegarLoop]: === Iteration 50 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:04:53,881 INFO L82 PathProgramCache]: Analyzing trace with hash 1457039484, now seen corresponding path program 44 times [2018-04-10 15:04:53,881 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:04:54,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:04:54,074 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:05:08,999 INFO L134 CoverageAnalysis]: Checked inductivity of 792948 backedges. 90 proven. 67364 refuted. 0 times theorem prover too weak. 725494 trivial. 0 not checked. [2018-04-10 15:05:08,999 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:05:08,999 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-10 15:05:08,999 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:05:09,000 INFO L134 CoverageAnalysis]: Checked inductivity of 34914 backedges. 0 proven. 3014 refuted. 0 times theorem prover too weak. 31900 trivial. 0 not checked. [2018-04-10 15:05:09,000 INFO L182 omatonBuilderFactory]: Interpolants [23053#true, 23054#false, 23055#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 23056#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23057#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23058#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23059#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23060#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23061#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23062#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23063#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 23064#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23065#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23066#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 23067#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23068#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 23069#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23070#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23071#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23072#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23073#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 18) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 23074#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 19) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23075#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 20) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23076#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 21) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23077#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 22) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 23078#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32))] [2018-04-10 15:05:09,008 INFO L134 CoverageAnalysis]: Checked inductivity of 792948 backedges. 90 proven. 67364 refuted. 0 times theorem prover too weak. 725494 trivial. 0 not checked. [2018-04-10 15:05:09,008 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-10 15:05:09,008 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-10 15:05:09,008 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=302, Invalid=348, Unknown=0, NotChecked=0, Total=650 [2018-04-10 15:05:09,009 INFO L87 Difference]: Start difference. First operand 412 states and 459 transitions. Second operand 26 states. [2018-04-10 15:05:09,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:05:09,114 INFO L93 Difference]: Finished difference Result 425 states and 472 transitions. [2018-04-10 15:05:09,114 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-04-10 15:05:09,114 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 3331 [2018-04-10 15:05:09,115 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:05:09,116 INFO L225 Difference]: With dead ends: 425 [2018-04-10 15:05:09,116 INFO L226 Difference]: Without dead ends: 422 [2018-04-10 15:05:09,117 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=327, Invalid=375, Unknown=0, NotChecked=0, Total=702 [2018-04-10 15:05:09,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2018-04-10 15:05:09,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 418. [2018-04-10 15:05:09,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 418 states. [2018-04-10 15:05:09,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 418 states to 418 states and 465 transitions. [2018-04-10 15:05:09,123 INFO L78 Accepts]: Start accepts. Automaton has 418 states and 465 transitions. Word has length 3331 [2018-04-10 15:05:09,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:05:09,123 INFO L459 AbstractCegarLoop]: Abstraction has 418 states and 465 transitions. [2018-04-10 15:05:09,123 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-10 15:05:09,123 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 465 transitions. [2018-04-10 15:05:09,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3470 [2018-04-10 15:05:09,196 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:05:09,197 INFO L355 BasicCegarLoop]: trace histogram [552, 529, 529, 529, 529, 529, 24, 23, 23, 23, 23, 23, 23, 23, 23, 23, 23, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:05:09,197 INFO L408 AbstractCegarLoop]: === Iteration 51 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:05:09,198 INFO L82 PathProgramCache]: Analyzing trace with hash 733030452, now seen corresponding path program 45 times [2018-04-10 15:05:09,198 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:05:09,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:05:09,408 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:05:22,669 INFO L134 CoverageAnalysis]: Checked inductivity of 865352 backedges. 0 proven. 1564 refuted. 0 times theorem prover too weak. 863788 trivial. 0 not checked. [2018-04-10 15:05:22,669 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:05:22,669 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2018-04-10 15:05:22,669 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:05:22,670 INFO L134 CoverageAnalysis]: Checked inductivity of 36432 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 36432 trivial. 0 not checked. [2018-04-10 15:05:22,670 INFO L182 omatonBuilderFactory]: Interpolants [23936#(<= main_~i~1 10), 23937#(<= main_~i~1 11), 23938#(<= main_~i~1 12), 23939#(<= main_~i~1 13), 23940#(<= main_~i~1 14), 23941#(<= main_~i~1 15), 23942#(<= main_~i~1 16), 23943#(<= main_~i~1 17), 23944#(<= main_~i~1 18), 23945#(<= main_~i~1 19), 23946#(<= main_~i~1 20), 23947#(<= main_~i~1 21), 23948#(<= main_~i~1 22), 23949#(<= main_~i~1 23), 23924#true, 23925#false, 23926#(= main_~i~1 0), 23927#(<= main_~i~1 1), 23928#(<= main_~i~1 2), 23929#(<= main_~i~1 3), 23930#(<= main_~i~1 4), 23931#(<= main_~i~1 5), 23932#(<= main_~i~1 6), 23933#(<= main_~i~1 7), 23934#(<= main_~i~1 8), 23935#(<= main_~i~1 9)] [2018-04-10 15:05:22,677 INFO L134 CoverageAnalysis]: Checked inductivity of 865352 backedges. 0 proven. 1564 refuted. 0 times theorem prover too weak. 863788 trivial. 0 not checked. [2018-04-10 15:05:22,677 INFO L442 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-04-10 15:05:22,678 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-04-10 15:05:22,678 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=325, Invalid=325, Unknown=0, NotChecked=0, Total=650 [2018-04-10 15:05:22,678 INFO L87 Difference]: Start difference. First operand 418 states and 465 transitions. Second operand 26 states. [2018-04-10 15:05:22,889 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:05:22,889 INFO L93 Difference]: Finished difference Result 556 states and 583 transitions. [2018-04-10 15:05:22,890 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2018-04-10 15:05:22,890 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 3469 [2018-04-10 15:05:22,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:05:22,893 INFO L225 Difference]: With dead ends: 556 [2018-04-10 15:05:22,893 INFO L226 Difference]: Without dead ends: 556 [2018-04-10 15:05:22,893 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=325, Invalid=325, Unknown=0, NotChecked=0, Total=650 [2018-04-10 15:05:22,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2018-04-10 15:05:22,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 429. [2018-04-10 15:05:22,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 429 states. [2018-04-10 15:05:22,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 429 states to 429 states and 478 transitions. [2018-04-10 15:05:22,901 INFO L78 Accepts]: Start accepts. Automaton has 429 states and 478 transitions. Word has length 3469 [2018-04-10 15:05:22,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:05:22,903 INFO L459 AbstractCegarLoop]: Abstraction has 429 states and 478 transitions. [2018-04-10 15:05:22,903 INFO L460 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-04-10 15:05:22,903 INFO L276 IsEmpty]: Start isEmpty. Operand 429 states and 478 transitions. [2018-04-10 15:05:22,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3620 [2018-04-10 15:05:22,953 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:05:22,953 INFO L355 BasicCegarLoop]: trace histogram [576, 552, 552, 552, 552, 552, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:05:22,953 INFO L408 AbstractCegarLoop]: === Iteration 52 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:05:22,954 INFO L82 PathProgramCache]: Analyzing trace with hash 541578285, now seen corresponding path program 46 times [2018-04-10 15:05:22,955 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:05:23,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:05:23,153 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:05:40,127 INFO L134 CoverageAnalysis]: Checked inductivity of 942312 backedges. 94 proven. 76797 refuted. 0 times theorem prover too weak. 865421 trivial. 0 not checked. [2018-04-10 15:05:40,128 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:05:40,128 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-10 15:05:40,128 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:05:40,129 INFO L134 CoverageAnalysis]: Checked inductivity of 39744 backedges. 0 proven. 3289 refuted. 0 times theorem prover too weak. 36455 trivial. 0 not checked. [2018-04-10 15:05:40,129 INFO L182 omatonBuilderFactory]: Interpolants [24960#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 23) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24961#(not (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| 32)), 24935#true, 24936#false, 24937#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 0)), 24938#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 1) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24939#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 2) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24940#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 3) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24941#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 4) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24942#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 5) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24943#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 6) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24944#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 7) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24945#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 8) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 24946#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 9) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24947#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 10) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24948#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 11) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 24949#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 12) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24950#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 13) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 24951#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 14) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24952#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 15) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24953#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 16) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24954#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 17) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24955#(and (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 18) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))) (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size))), 24956#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 19) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24957#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 20) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24958#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 21) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32)))), 24959#(and (or (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32) (= |__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_#in~size| __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size)) (or (<= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~i~0 22) (not (= __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__foo_~size 32))))] [2018-04-10 15:05:40,138 INFO L134 CoverageAnalysis]: Checked inductivity of 942312 backedges. 94 proven. 76797 refuted. 0 times theorem prover too weak. 865421 trivial. 0 not checked. [2018-04-10 15:05:40,138 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-10 15:05:40,138 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-10 15:05:40,138 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=327, Invalid=375, Unknown=0, NotChecked=0, Total=702 [2018-04-10 15:05:40,139 INFO L87 Difference]: Start difference. First operand 429 states and 478 transitions. Second operand 27 states. [2018-04-10 15:05:40,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:05:40,235 INFO L93 Difference]: Finished difference Result 442 states and 491 transitions. [2018-04-10 15:05:40,235 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2018-04-10 15:05:40,236 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 3619 [2018-04-10 15:05:40,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:05:40,237 INFO L225 Difference]: With dead ends: 442 [2018-04-10 15:05:40,237 INFO L226 Difference]: Without dead ends: 439 [2018-04-10 15:05:40,237 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=353, Invalid=403, Unknown=0, NotChecked=0, Total=756 [2018-04-10 15:05:40,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2018-04-10 15:05:40,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 435. [2018-04-10 15:05:40,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 435 states. [2018-04-10 15:05:40,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 484 transitions. [2018-04-10 15:05:40,241 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 484 transitions. Word has length 3619 [2018-04-10 15:05:40,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:05:40,241 INFO L459 AbstractCegarLoop]: Abstraction has 435 states and 484 transitions. [2018-04-10 15:05:40,241 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-10 15:05:40,241 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 484 transitions. [2018-04-10 15:05:40,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3764 [2018-04-10 15:05:40,291 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:05:40,291 INFO L355 BasicCegarLoop]: trace histogram [600, 576, 576, 576, 576, 576, 25, 24, 24, 24, 24, 24, 24, 24, 24, 24, 24, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:05:40,291 INFO L408 AbstractCegarLoop]: === Iteration 53 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:05:40,291 INFO L82 PathProgramCache]: Analyzing trace with hash 1465678829, now seen corresponding path program 47 times [2018-04-10 15:05:40,292 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:05:40,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:05:40,488 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. [2018-04-10 15:05:56,040 INFO L134 CoverageAnalysis]: Checked inductivity of 1024608 backedges. 0 proven. 1704 refuted. 0 times theorem prover too weak. 1022904 trivial. 0 not checked. [2018-04-10 15:05:56,040 INFO L320 seRefinementStrategy]: Constructing automaton from 0 perfect and 1 imperfect interpolant sequences. [2018-04-10 15:05:56,040 INFO L335 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2018-04-10 15:05:56,041 INFO L142 lantAutomatonBuilder]: Constructing canonical interpolant automaton, with selfloop in false state [2018-04-10 15:05:56,041 INFO L134 CoverageAnalysis]: Checked inductivity of 41400 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 41400 trivial. 0 not checked. [2018-04-10 15:05:56,042 INFO L182 omatonBuilderFactory]: Interpolants [25856#(<= main_~i~1 13), 25857#(<= main_~i~1 14), 25858#(<= main_~i~1 15), 25859#(<= main_~i~1 16), 25860#(<= main_~i~1 17), 25861#(<= main_~i~1 18), 25862#(<= main_~i~1 19), 25863#(<= main_~i~1 20), 25864#(<= main_~i~1 21), 25865#(<= main_~i~1 22), 25866#(<= main_~i~1 23), 25867#(<= main_~i~1 24), 25841#true, 25842#false, 25843#(= main_~i~1 0), 25844#(<= main_~i~1 1), 25845#(<= main_~i~1 2), 25846#(<= main_~i~1 3), 25847#(<= main_~i~1 4), 25848#(<= main_~i~1 5), 25849#(<= main_~i~1 6), 25850#(<= main_~i~1 7), 25851#(<= main_~i~1 8), 25852#(<= main_~i~1 9), 25853#(<= main_~i~1 10), 25854#(<= main_~i~1 11), 25855#(<= main_~i~1 12)] [2018-04-10 15:05:56,050 INFO L134 CoverageAnalysis]: Checked inductivity of 1024608 backedges. 0 proven. 1704 refuted. 0 times theorem prover too weak. 1022904 trivial. 0 not checked. [2018-04-10 15:05:56,050 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2018-04-10 15:05:56,050 INFO L132 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2018-04-10 15:05:56,050 INFO L133 InterpolantAutomaton]: CoverageRelationStatistics Valid=351, Invalid=351, Unknown=0, NotChecked=0, Total=702 [2018-04-10 15:05:56,051 INFO L87 Difference]: Start difference. First operand 435 states and 484 transitions. Second operand 27 states. [2018-04-10 15:05:56,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-04-10 15:05:56,293 INFO L93 Difference]: Finished difference Result 578 states and 606 transitions. [2018-04-10 15:05:56,294 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2018-04-10 15:05:56,294 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 3763 [2018-04-10 15:05:56,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-04-10 15:05:56,296 INFO L225 Difference]: With dead ends: 578 [2018-04-10 15:05:56,296 INFO L226 Difference]: Without dead ends: 578 [2018-04-10 15:05:56,297 INFO L567 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=351, Invalid=351, Unknown=0, NotChecked=0, Total=702 [2018-04-10 15:05:56,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 578 states. [2018-04-10 15:05:56,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 578 to 446. [2018-04-10 15:05:56,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 446 states. [2018-04-10 15:05:56,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 446 states to 446 states and 497 transitions. [2018-04-10 15:05:56,301 INFO L78 Accepts]: Start accepts. Automaton has 446 states and 497 transitions. Word has length 3763 [2018-04-10 15:05:56,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-04-10 15:05:56,302 INFO L459 AbstractCegarLoop]: Abstraction has 446 states and 497 transitions. [2018-04-10 15:05:56,302 INFO L460 AbstractCegarLoop]: Interpolant automaton has 27 states. [2018-04-10 15:05:56,302 INFO L276 IsEmpty]: Start isEmpty. Operand 446 states and 497 transitions. [2018-04-10 15:05:56,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 3920 [2018-04-10 15:05:56,354 INFO L347 BasicCegarLoop]: Found error trace [2018-04-10 15:05:56,355 INFO L355 BasicCegarLoop]: trace histogram [625, 600, 600, 600, 600, 600, 26, 25, 25, 25, 25, 25, 25, 25, 25, 25, 25, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-04-10 15:05:56,355 INFO L408 AbstractCegarLoop]: === Iteration 54 === [__U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr1RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr2RequiresViolation, __U_MULTI_fArraysOfVariableLength__true_valid_memsafety_true_termination_c__fooErr0AssertViolationARRAY_INDEX, mainErr1AssertViolationARRAY_INDEX, mainErr2EnsuresViolationMEMORY_LEAK, mainErr0AssertViolationARRAY_INDEX]=== [2018-04-10 15:05:56,355 INFO L82 PathProgramCache]: Analyzing trace with hash -1670682002, now seen corresponding path program 48 times [2018-04-10 15:05:56,355 INFO L68 tionRefinementEngine]: Using refinement strategy FixedRefinementStrategy [2018-04-10 15:05:56,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-04-10 15:05:56,556 WARN L137 erpolLogProxyWrapper]: Using partial proofs (cut at CNF-level). Set option :produce-proofs to true to get complete proofs. Received shutdown request... [2018-04-10 15:06:02,874 FATAL L265 ToolchainWalker]: An unrecoverable error occured during an interaction with an SMT solver: de.uni_freiburg.informatik.ultimate.logic.SMTLIBException: Timeout exceeded at de.uni_freiburg.informatik.ultimate.smtinterpol.interpolate.Interpolator.walkLeafNode(Interpolator.java:265) at de.uni_freiburg.informatik.ultimate.smtinterpol.interpolate.Interpolator.access$1(Interpolator.java:263) at de.uni_freiburg.informatik.ultimate.smtinterpol.interpolate.Interpolator$ProofTreeWalker.walk(Interpolator.java:132) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:122) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:113) at de.uni_freiburg.informatik.ultimate.smtinterpol.interpolate.Interpolator.interpolate(Interpolator.java:220) at de.uni_freiburg.informatik.ultimate.smtinterpol.interpolate.Interpolator.getInterpolants(Interpolator.java:201) at de.uni_freiburg.informatik.ultimate.smtinterpol.smtlib2.SMTInterpol.getInterpolants(SMTInterpol.java:918) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.managedscript.ManagedScript.getInterpolants(ManagedScript.java:192) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.NestedInterpolantsBuilder.computeCraigInterpolants(NestedInterpolantsBuilder.java:281) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.NestedInterpolantsBuilder.(NestedInterpolantsBuilder.java:164) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolantsTree(InterpolatingTraceCheckCraig.java:267) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolants(InterpolatingTraceCheckCraig.java:203) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.singletracecheck.InterpolatingTraceCheckCraig.(InterpolatingTraceCheckCraig.java:106) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceCheckConstructor.constructCraig(TraceCheckConstructor.java:222) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceCheckConstructor.get(TraceCheckConstructor.java:179) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.FixedRefinementStrategy.getTraceCheck(FixedRefinementStrategy.java:131) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.checkFeasibility(BaseRefinementStrategy.java:231) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.BaseRefinementStrategy.executeStrategy(BaseRefinementStrategy.java:205) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:69) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:408) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterateInternal(AbstractCegarLoop.java:417) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:363) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.iterate(TraceAbstractionStarter.java:304) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:150) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:118) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:119) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:324) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.runToolchainDefault(DefaultToolchainJob.java:221) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.BasicToolchainJob.run(BasicToolchainJob.java:134) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-04-10 15:06:02,877 INFO L168 Benchmark]: Toolchain (without parser) took 190945.09 ms. Allocated memory was 397.4 MB in the beginning and 2.7 GB in the end (delta: 2.3 GB). Free memory was 340.2 MB in the beginning and 1.3 GB in the end (delta: -976.0 MB). Peak memory consumption was 2.4 GB. Max. memory is 5.3 GB. [2018-04-10 15:06:02,878 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 397.4 MB. Free memory is still 360.1 MB. There was no memory consumed. Max. memory is 5.3 GB. [2018-04-10 15:06:02,878 INFO L168 Benchmark]: CACSL2BoogieTranslator took 162.67 ms. Allocated memory is still 397.4 MB. Free memory was 340.2 MB in the beginning and 329.5 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 5.3 GB. [2018-04-10 15:06:02,878 INFO L168 Benchmark]: Boogie Preprocessor took 25.03 ms. Allocated memory is still 397.4 MB. Free memory was 329.5 MB in the beginning and 328.2 MB in the end (delta: 1.3 MB). Peak memory consumption was 1.3 MB. Max. memory is 5.3 GB. [2018-04-10 15:06:02,878 INFO L168 Benchmark]: RCFGBuilder took 240.06 ms. Allocated memory was 397.4 MB in the beginning and 596.6 MB in the end (delta: 199.2 MB). Free memory was 328.2 MB in the beginning and 557.3 MB in the end (delta: -229.1 MB). Peak memory consumption was 25.6 MB. Max. memory is 5.3 GB. [2018-04-10 15:06:02,879 INFO L168 Benchmark]: TraceAbstraction took 190514.46 ms. Allocated memory was 596.6 MB in the beginning and 2.7 GB in the end (delta: 2.1 GB). Free memory was 555.6 MB in the beginning and 1.3 GB in the end (delta: -760.6 MB). Peak memory consumption was 2.4 GB. Max. memory is 5.3 GB. [2018-04-10 15:06:02,880 INFO L344 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 397.4 MB. Free memory is still 360.1 MB. There was no memory consumed. Max. memory is 5.3 GB. * CACSL2BoogieTranslator took 162.67 ms. Allocated memory is still 397.4 MB. Free memory was 340.2 MB in the beginning and 329.5 MB in the end (delta: 10.7 MB). Peak memory consumption was 10.7 MB. Max. memory is 5.3 GB. * Boogie Preprocessor took 25.03 ms. Allocated memory is still 397.4 MB. Free memory was 329.5 MB in the beginning and 328.2 MB in the end (delta: 1.3 MB). Peak memory consumption was 1.3 MB. Max. memory is 5.3 GB. * RCFGBuilder took 240.06 ms. Allocated memory was 397.4 MB in the beginning and 596.6 MB in the end (delta: 199.2 MB). Free memory was 328.2 MB in the beginning and 557.3 MB in the end (delta: -229.1 MB). Peak memory consumption was 25.6 MB. Max. memory is 5.3 GB. * TraceAbstraction took 190514.46 ms. Allocated memory was 596.6 MB in the beginning and 2.7 GB in the end (delta: 2.1 GB). Free memory was 555.6 MB in the beginning and 1.3 GB in the end (delta: -760.6 MB). Peak memory consumption was 2.4 GB. Max. memory is 5.3 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: SMTLIBException: Timeout exceeded de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: SMTLIBException: Timeout exceeded: de.uni_freiburg.informatik.ultimate.smtinterpol.interpolate.Interpolator.walkLeafNode(Interpolator.java:265) RESULT: Ultimate could not prove your program: Toolchain returned no result. Written .csv to /home/ultimate/work/ultimate/releaseScripts/default/UAutomizer-linux/../../../releaseScripts/default/UAutomizer-linux/csv/ArraysOfVariableLength6_true-valid-memsafety_true-termination.c_svcomp-DerefFreeMemtrack-32bit-Automizer_SmtInterpol_Array.epf_AutomizerC.xml/Csv-Benchmark-0-2018-04-10_15-06-02-886.csv Completed graceful shutdown