java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AbstractInterpretationInline.xml -s ../../../trunk/examples/settings/ai/array-bench/reach_32bit_array_compound_exp_cong.epf -i ../../../trunk/examples/programs/20170304-DifficultPathPrograms/verisec_NetBSD-libc__loop.i_2.bpl -------------------------------------------------------------------------------- This is Ultimate 0.1.24-1377b90 [2019-01-07 15:20:55,330 INFO L170 SettingsManager]: Resetting all preferences to default values... [2019-01-07 15:20:55,332 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2019-01-07 15:20:55,349 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-01-07 15:20:55,349 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-01-07 15:20:55,350 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-01-07 15:20:55,352 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-01-07 15:20:55,354 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2019-01-07 15:20:55,358 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-01-07 15:20:55,358 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-01-07 15:20:55,368 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-01-07 15:20:55,368 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-01-07 15:20:55,369 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-01-07 15:20:55,370 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-01-07 15:20:55,371 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-01-07 15:20:55,374 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-01-07 15:20:55,375 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-01-07 15:20:55,377 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-01-07 15:20:55,381 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2019-01-07 15:20:55,385 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-01-07 15:20:55,387 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-01-07 15:20:55,388 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-01-07 15:20:55,393 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-01-07 15:20:55,394 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-01-07 15:20:55,395 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-01-07 15:20:55,396 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-01-07 15:20:55,398 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-01-07 15:20:55,399 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-01-07 15:20:55,399 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2019-01-07 15:20:55,400 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-01-07 15:20:55,401 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2019-01-07 15:20:55,401 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-01-07 15:20:55,401 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-01-07 15:20:55,403 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2019-01-07 15:20:55,405 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2019-01-07 15:20:55,405 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2019-01-07 15:20:55,406 INFO L98 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/ai/array-bench/reach_32bit_array_compound_exp_cong.epf [2019-01-07 15:20:55,434 INFO L110 SettingsManager]: Loading preferences was successful [2019-01-07 15:20:55,434 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2019-01-07 15:20:55,435 INFO L131 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2019-01-07 15:20:55,435 INFO L133 SettingsManager]: * Show backtranslation warnings=false [2019-01-07 15:20:55,435 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-01-07 15:20:55,436 INFO L133 SettingsManager]: * User list type=DISABLED [2019-01-07 15:20:55,436 INFO L133 SettingsManager]: * Inline calls to unimplemented procedures=true [2019-01-07 15:20:55,436 INFO L131 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-01-07 15:20:55,436 INFO L133 SettingsManager]: * Explicit value domain=true [2019-01-07 15:20:55,436 INFO L133 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-01-07 15:20:55,437 INFO L133 SettingsManager]: * Octagon Domain=false [2019-01-07 15:20:55,439 INFO L133 SettingsManager]: * Abstract domain=ArrayDomain [2019-01-07 15:20:55,439 INFO L133 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-01-07 15:20:55,439 INFO L133 SettingsManager]: * Interval Domain=false [2019-01-07 15:20:55,440 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-01-07 15:20:55,440 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2019-01-07 15:20:55,440 INFO L133 SettingsManager]: * Use SBE=true [2019-01-07 15:20:55,442 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-01-07 15:20:55,442 INFO L133 SettingsManager]: * sizeof long=4 [2019-01-07 15:20:55,442 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2019-01-07 15:20:55,442 INFO L133 SettingsManager]: * sizeof POINTER=4 [2019-01-07 15:20:55,442 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2019-01-07 15:20:55,442 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-01-07 15:20:55,443 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-01-07 15:20:55,443 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-01-07 15:20:55,443 INFO L133 SettingsManager]: * sizeof long double=12 [2019-01-07 15:20:55,443 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2019-01-07 15:20:55,443 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-01-07 15:20:55,444 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-01-07 15:20:55,444 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-01-07 15:20:55,444 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2019-01-07 15:20:55,444 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-01-07 15:20:55,445 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-01-07 15:20:55,445 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-01-07 15:20:55,445 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-01-07 15:20:55,445 INFO L133 SettingsManager]: * Trace refinement strategy=TAIPAN [2019-01-07 15:20:55,445 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-01-07 15:20:55,446 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-01-07 15:20:55,446 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-01-07 15:20:55,446 INFO L133 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2019-01-07 15:20:55,480 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-01-07 15:20:55,493 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-01-07 15:20:55,500 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-01-07 15:20:55,502 INFO L271 PluginConnector]: Initializing Boogie PL CUP Parser... [2019-01-07 15:20:55,502 INFO L276 PluginConnector]: Boogie PL CUP Parser initialized [2019-01-07 15:20:55,503 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/programs/20170304-DifficultPathPrograms/verisec_NetBSD-libc__loop.i_2.bpl [2019-01-07 15:20:55,503 INFO L111 BoogieParser]: Parsing: '/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/programs/20170304-DifficultPathPrograms/verisec_NetBSD-libc__loop.i_2.bpl' [2019-01-07 15:20:55,584 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-01-07 15:20:55,586 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2019-01-07 15:20:55,587 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-01-07 15:20:55,587 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-01-07 15:20:55,587 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2019-01-07 15:20:55,607 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,624 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,635 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-01-07 15:20:55,636 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-01-07 15:20:55,636 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-01-07 15:20:55,637 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2019-01-07 15:20:55,651 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,651 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,652 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,653 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,659 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,663 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,664 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... [2019-01-07 15:20:55,666 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-01-07 15:20:55,667 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-01-07 15:20:55,668 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-01-07 15:20:55,668 INFO L276 PluginConnector]: RCFGBuilder initialized [2019-01-07 15:20:55,669 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 07.01 03:20:55" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-01-07 15:20:55,747 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-01-07 15:20:55,747 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-01-07 15:20:56,191 INFO L281 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-01-07 15:20:56,191 INFO L286 CfgBuilder]: Removed 1 assue(true) statements. [2019-01-07 15:20:56,193 INFO L202 PluginConnector]: Adding new model verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.01 03:20:56 BoogieIcfgContainer [2019-01-07 15:20:56,193 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-01-07 15:20:56,194 INFO L113 PluginConnector]: ------------------------Abstract Interpretation---------------------------- [2019-01-07 15:20:56,194 INFO L271 PluginConnector]: Initializing Abstract Interpretation... [2019-01-07 15:20:56,194 INFO L276 PluginConnector]: Abstract Interpretation initialized [2019-01-07 15:20:56,195 INFO L185 PluginConnector]: Executing the observer AbstractInterpretationRcfgObserver from plugin Abstract Interpretation for "verisec_NetBSD-libc__loop.i_2.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.01 03:20:56" (1/1) ... [2019-01-07 15:20:56,238 INFO L101 FixpointEngine]: Starting fixpoint engine with domain ArrayDomain (maxUnwinding=3, maxParallelStates=2) [2019-01-07 15:20:56,759 WARN L212 ngHoareTripleChecker]: Soundness check inconclusive for the following hoare triple [2019-01-07 15:20:56,759 WARN L217 ngHoareTripleChecker]: Expected: VALID Actual: UNKNOWN [2019-01-07 15:20:56,760 WARN L219 ngHoareTripleChecker]: Solver was "Z3" in version "4.8.3" [2019-01-07 15:20:56,761 WARN L223 ngHoareTripleChecker]: -- [2019-01-07 15:20:56,762 WARN L224 ngHoareTripleChecker]: Pre: {2147483647#(forall ((v_idx_7 Int) (v_idx_8 Int) (v_idx_9 Int) (v_idx_12 Int) (v_idx_3 Int) (v_idx_10 Int) (v_idx_4 Int) (v_idx_11 Int) (v_idx_5 Int) (v_idx_6 Int) (v_idx_1 Int) (v_idx_2 Int)) (exists ((v_v_9_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_8_1 (Array Int Int)) (v_v_0_1 Int) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_v_5_1 Int) (v_v_6_1 Int) (v_v_7_1 Int)) (and (= v_v_3_1 (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_11)) (= v_v_11_1 (select v_v_10_1 v_idx_1)) (= (select v_v_3_1 v_idx_3) v_v_4_1) (= (select |c_#memory_int| v_idx_7) v_v_8_1) (= v_v_7_1 (select |c_old(#valid)| v_idx_5)) (= v_v_1_1 (select |c_#length| v_idx_9)) (= (select |c_old(#length)| v_idx_10) v_v_2_1) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_6) v_v_0_1) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_8)) (= v_v_5_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_12)) (= v_v_9_1 (select v_v_8_1 v_idx_2)) (= (select |c_#valid| v_idx_4) v_v_6_1))))} [2019-01-07 15:20:56,766 WARN L228 ngHoareTripleChecker]: Action: #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~tmp.base, ~tmp.offset := 0, 0;havoc main_#res;havoc main_#t~ret2, main_~#pathbuf~6.base, main_~#pathbuf~6.offset, main_~bound~6.base, main_~bound~6.offset;#Ultimate.alloc_old_#length, #Ultimate.alloc_old_#valid := #length, #valid;#Ultimate.alloc_~size := 8;havoc #Ultimate.alloc_#res.base, #Ultimate.alloc_#res.offset;havoc #valid, #length;assume #Ultimate.alloc_old_#valid[#Ultimate.alloc_#res.base] == 0;assume #valid == #Ultimate.alloc_old_#valid[#Ultimate.alloc_#res.base := 1];assume #Ultimate.alloc_#res.offset == 0;assume #Ultimate.alloc_#res.base != 0;assume #length == #Ultimate.alloc_old_#length[#Ultimate.alloc_#res.base := #Ultimate.alloc_~size];main_~#pathbuf~6.base, main_~#pathbuf~6.offset := #Ultimate.alloc_#res.base, #Ultimate.alloc_#res.offset;main_~bound~6.base, main_~bound~6.offset := main_~#pathbuf~6.base, main_~#pathbuf~6.offset + 32 - 4;~tmp.base, ~tmp.offset := main_~#pathbuf~6.base, main_~#pathbuf~6.offset + 8 - 4;glob2_#in~pathbuf.base, glob2_#in~pathbuf.offset, glob2_#in~pathlim.base, glob2_#in~pathlim.offset := main_~#pathbuf~6.base, main_~#pathbuf~6.offset, main_~bound~6.base, main_~bound~6.offset;havoc glob2_#res;havoc glob2_#t~post0.base, glob2_#t~post0.offset, glob2_~pathbuf.base, glob2_~pathbuf.offset, glob2_~pathlim.base, glob2_~pathlim.offset, glob2_~p~4.base, glob2_~p~4.offset;glob2_~pathbuf.base, glob2_~pathbuf.offset := glob2_#in~pathbuf.base, glob2_#in~pathbuf.offset;glob2_~pathlim.base, glob2_~pathlim.offset := glob2_#in~pathlim.base, glob2_#in~pathlim.offset;havoc glob2_~p~4.base, glob2_~p~4.offset;glob2_~p~4.base, glob2_~p~4.offset := glob2_~pathbuf.base, glob2_~pathbuf.offset; [2019-01-07 15:20:56,767 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (not (= 0 |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed|)) (= |c_#length_primed| (store |c_ULTIMATE.start_#Ultimate.alloc_old_#length_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed| |c_ULTIMATE.start_#Ultimate.alloc_~size_primed|)) (= c_ULTIMATE.start_glob2_~pathlim.base_primed |c_ULTIMATE.start_glob2_#in~pathlim.base_primed|) (= |c_ULTIMATE.start_#Ultimate.alloc_old_#length_primed| |c_#length|) (= c_ULTIMATE.start_main_~bound~6.offset_primed (+ |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed| 28)) (= c_ULTIMATE.start_glob2_~pathbuf.base_primed |c_ULTIMATE.start_glob2_#in~pathbuf.base_primed|) (= c_ULTIMATE.start_glob2_~p~4.base_primed c_ULTIMATE.start_glob2_~pathbuf.base_primed) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.offset_primed|) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset_primed| |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed|) (= |c_#NULL.offset_primed| 0) (= c_~tmp.base_primed |c_ULTIMATE.start_main_~#pathbuf~6.base_primed|) (= c_ULTIMATE.start_glob2_~p~4.offset_primed c_ULTIMATE.start_glob2_~pathbuf.offset_primed) (= c_ULTIMATE.start_glob2_~pathbuf.offset_primed |c_ULTIMATE.start_glob2_#in~pathbuf.offset_primed|) (= |c_#NULL.base_primed| 0) (= |c_ULTIMATE.start_#Ultimate.alloc_~size_primed| 8) (= |c_ULTIMATE.start_#Ultimate.alloc_old_#valid_primed| (store |c_#valid| 0 0)) (= c_ULTIMATE.start_glob2_~pathlim.offset_primed |c_ULTIMATE.start_glob2_#in~pathlim.offset_primed|) (= (store |c_ULTIMATE.start_#Ultimate.alloc_old_#valid_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed| 1) |c_#valid_primed|) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset_primed| c_ULTIMATE.start_main_~bound~6.offset_primed) (= |c_ULTIMATE.start_glob2_#in~pathlim.base_primed| c_ULTIMATE.start_main_~bound~6.base_primed) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset_primed| 0) (= 0 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed|)) (= c_~tmp.offset_primed (+ |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed| 4)) (= |c_ULTIMATE.start_main_~#pathbuf~6.base_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed|) (= c_ULTIMATE.start_main_~bound~6.base_primed |c_ULTIMATE.start_main_~#pathbuf~6.base_primed|) (= |c_ULTIMATE.start_glob2_#in~pathbuf.base_primed| |c_ULTIMATE.start_main_~#pathbuf~6.base_primed|)) [2019-01-07 15:20:56,768 WARN L230 ngHoareTripleChecker]: Post: {2147483646#(forall ((v_idx_25 Int) (v_idx_14 Int) (v_idx_26 Int) (v_idx_15 Int) (v_idx_23 Int) (v_idx_24 Int) (v_idx_13 Int) (v_idx_21 Int) (v_idx_22 Int) (v_idx_20 Int) (v_idx_18 Int) (v_idx_19 Int) (v_idx_27 Int) (v_idx_16 Int) (v_idx_28 Int) (v_idx_17 Int)) (exists ((v_b_6_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (or (< v_idx_28 v_b_11_1) (= (select |c_#length| v_idx_28) v_v_31_1)) (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (or (= (select |c_#valid| v_idx_20) v_v_23_1) (<= v_b_6_1 v_idx_20)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_15) v_v_17_1) (not (= c_~tmp.base 0)) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_24)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (or (= (select |c_#length| v_idx_26) v_v_29_1) (<= v_b_10_1 v_idx_26)) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_17) v_v_1_1) (= v_v_24_1 1) (= (select |c_old(#valid)| v_idx_19) v_v_7_1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= (select |c_#memory_int| v_idx_23) v_v_8_1) (or (< v_idx_27 v_b_10_1) (= (select |c_#length| v_idx_27) v_v_30_1) (<= v_b_11_1 v_idx_27)) (= v_v_9_1 (select v_v_8_1 v_idx_13)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select v_v_3_1 v_idx_14) v_v_4_1) (or (= (select |c_#valid| v_idx_22) v_v_25_1) (< v_idx_22 v_b_7_1)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (or (<= v_b_7_1 v_idx_21) (= (select |c_#valid| v_idx_21) v_v_24_1) (< v_idx_21 v_b_6_1)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (= (select v_v_10_1 v_idx_18) v_v_11_1) (= (select |c_old(#length)| v_idx_25) v_v_2_1) (= v_v_3_1 (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_16)))))} [2019-01-07 15:20:56,768 WARN L263 ngHoareTripleChecker]: unsat core / model generation is disabled, enable it to get more details [2019-01-07 15:20:56,769 WARN L268 ngHoareTripleChecker]: -- [2019-01-07 15:20:56,769 WARN L269 ngHoareTripleChecker]: Simplified triple [2019-01-07 15:20:56,856 WARN L270 ngHoareTripleChecker]: Pre: {2147483647#true} [2019-01-07 15:20:56,856 WARN L274 ngHoareTripleChecker]: Action: #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~tmp.base, ~tmp.offset := 0, 0;havoc main_#res;havoc main_#t~ret2, main_~#pathbuf~6.base, main_~#pathbuf~6.offset, main_~bound~6.base, main_~bound~6.offset;#Ultimate.alloc_old_#length, #Ultimate.alloc_old_#valid := #length, #valid;#Ultimate.alloc_~size := 8;havoc #Ultimate.alloc_#res.base, #Ultimate.alloc_#res.offset;havoc #valid, #length;assume #Ultimate.alloc_old_#valid[#Ultimate.alloc_#res.base] == 0;assume #valid == #Ultimate.alloc_old_#valid[#Ultimate.alloc_#res.base := 1];assume #Ultimate.alloc_#res.offset == 0;assume #Ultimate.alloc_#res.base != 0;assume #length == #Ultimate.alloc_old_#length[#Ultimate.alloc_#res.base := #Ultimate.alloc_~size];main_~#pathbuf~6.base, main_~#pathbuf~6.offset := #Ultimate.alloc_#res.base, #Ultimate.alloc_#res.offset;main_~bound~6.base, main_~bound~6.offset := main_~#pathbuf~6.base, main_~#pathbuf~6.offset + 32 - 4;~tmp.base, ~tmp.offset := main_~#pathbuf~6.base, main_~#pathbuf~6.offset + 8 - 4;glob2_#in~pathbuf.base, glob2_#in~pathbuf.offset, glob2_#in~pathlim.base, glob2_#in~pathlim.offset := main_~#pathbuf~6.base, main_~#pathbuf~6.offset, main_~bound~6.base, main_~bound~6.offset;havoc glob2_#res;havoc glob2_#t~post0.base, glob2_#t~post0.offset, glob2_~pathbuf.base, glob2_~pathbuf.offset, glob2_~pathlim.base, glob2_~pathlim.offset, glob2_~p~4.base, glob2_~p~4.offset;glob2_~pathbuf.base, glob2_~pathbuf.offset := glob2_#in~pathbuf.base, glob2_#in~pathbuf.offset;glob2_~pathlim.base, glob2_~pathlim.offset := glob2_#in~pathlim.base, glob2_#in~pathlim.offset;havoc glob2_~p~4.base, glob2_~p~4.offset;glob2_~p~4.base, glob2_~p~4.offset := glob2_~pathbuf.base, glob2_~pathbuf.offset; [2019-01-07 15:20:56,857 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (not (= 0 |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed|)) (= |c_#length_primed| (store |c_ULTIMATE.start_#Ultimate.alloc_old_#length_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed| |c_ULTIMATE.start_#Ultimate.alloc_~size_primed|)) (= c_ULTIMATE.start_glob2_~pathlim.base_primed |c_ULTIMATE.start_glob2_#in~pathlim.base_primed|) (= |c_ULTIMATE.start_#Ultimate.alloc_old_#length_primed| |c_#length|) (= c_ULTIMATE.start_main_~bound~6.offset_primed (+ |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed| 28)) (= c_ULTIMATE.start_glob2_~pathbuf.base_primed |c_ULTIMATE.start_glob2_#in~pathbuf.base_primed|) (= c_ULTIMATE.start_glob2_~p~4.base_primed c_ULTIMATE.start_glob2_~pathbuf.base_primed) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.offset_primed|) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset_primed| |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed|) (= |c_#NULL.offset_primed| 0) (= c_~tmp.base_primed |c_ULTIMATE.start_main_~#pathbuf~6.base_primed|) (= c_ULTIMATE.start_glob2_~p~4.offset_primed c_ULTIMATE.start_glob2_~pathbuf.offset_primed) (= c_ULTIMATE.start_glob2_~pathbuf.offset_primed |c_ULTIMATE.start_glob2_#in~pathbuf.offset_primed|) (= |c_#NULL.base_primed| 0) (= |c_ULTIMATE.start_#Ultimate.alloc_~size_primed| 8) (= |c_ULTIMATE.start_#Ultimate.alloc_old_#valid_primed| (store |c_#valid| 0 0)) (= c_ULTIMATE.start_glob2_~pathlim.offset_primed |c_ULTIMATE.start_glob2_#in~pathlim.offset_primed|) (= (store |c_ULTIMATE.start_#Ultimate.alloc_old_#valid_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed| 1) |c_#valid_primed|) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset_primed| c_ULTIMATE.start_main_~bound~6.offset_primed) (= |c_ULTIMATE.start_glob2_#in~pathlim.base_primed| c_ULTIMATE.start_main_~bound~6.base_primed) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset_primed| 0) (= 0 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed|)) (= c_~tmp.offset_primed (+ |c_ULTIMATE.start_main_~#pathbuf~6.offset_primed| 4)) (= |c_ULTIMATE.start_main_~#pathbuf~6.base_primed| |c_ULTIMATE.start_#Ultimate.alloc_#res.base_primed|) (= c_ULTIMATE.start_main_~bound~6.base_primed |c_ULTIMATE.start_main_~#pathbuf~6.base_primed|) (= |c_ULTIMATE.start_glob2_#in~pathbuf.base_primed| |c_ULTIMATE.start_main_~#pathbuf~6.base_primed|)) [2019-01-07 15:20:57,359 WARN L276 ngHoareTripleChecker]: Post: {2147483646#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:20:57,504 WARN L212 ngHoareTripleChecker]: Soundness check inconclusive for the following hoare triple [2019-01-07 15:20:57,505 WARN L217 ngHoareTripleChecker]: Expected: VALID Actual: UNKNOWN [2019-01-07 15:20:57,505 WARN L219 ngHoareTripleChecker]: Solver was "Z3" in version "4.8.3" [2019-01-07 15:20:57,506 WARN L223 ngHoareTripleChecker]: -- [2019-01-07 15:20:57,506 WARN L224 ngHoareTripleChecker]: Pre: {2147483645#(forall ((v_idx_36 Int) (v_idx_37 Int) (v_idx_34 Int) (v_idx_35 Int) (v_idx_43 Int) (v_idx_32 Int) (v_idx_44 Int) (v_idx_33 Int) (v_idx_41 Int) (v_idx_30 Int) (v_idx_42 Int) (v_idx_31 Int) (v_idx_40 Int) (v_idx_29 Int) (v_idx_38 Int) (v_idx_39 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (or (= (select |c_#length| v_idx_43) v_v_30_1) (< v_idx_43 v_b_10_1) (<= v_b_11_1 v_idx_43)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_40)) (or (<= v_b_7_1 v_idx_37) (= (select |c_#valid| v_idx_37) v_v_24_1) (< v_idx_37 v_b_6_1)) (or (= (select |c_#length| v_idx_42) v_v_29_1) (<= v_b_10_1 v_idx_42)) (not (= c_~tmp.base 0)) (= (select |c_old(#length)| v_idx_41) v_v_2_1) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (or (< v_idx_44 v_b_11_1) (= (select |c_#length| v_idx_44) v_v_31_1)) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (or (<= v_b_6_1 v_idx_36) (= (select |c_#valid| v_idx_36) v_v_23_1)) (= v_v_8_1 (select |c_#memory_int| v_idx_39)) (= v_v_30_1 8) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_32) v_v_3_1) (= (select v_v_10_1 v_idx_34) v_v_11_1) (= v_v_9_1 (select v_v_8_1 v_idx_29)) (= v_v_7_1 (select |c_old(#valid)| v_idx_35)) (= v_v_4_1 (select v_v_3_1 v_idx_30)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_31) v_v_17_1) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (or (= (select |c_#valid| v_idx_38) v_v_25_1) (< v_idx_38 v_b_7_1)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_33) v_v_1_1))))} [2019-01-07 15:20:57,507 WARN L228 ngHoareTripleChecker]: Action: assume !!(glob2_~p~4.base == glob2_~pathlim.base && glob2_~p~4.offset <= glob2_~pathlim.offset);__VERIFIER_assert_#in~cond := (if glob2_~p~4.base == ~tmp.base && glob2_~p~4.offset <= ~tmp.offset then 1 else 0);havoc __VERIFIER_assert_~cond;__VERIFIER_assert_~cond := __VERIFIER_assert_#in~cond; [2019-01-07 15:20:57,507 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (= c_ULTIMATE.start___VERIFIER_assert_~cond_primed |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed|) (= |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed| (ite (and (= c_~tmp.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_~tmp.offset)) 1 0)) (= c_ULTIMATE.start_glob2_~pathlim.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_ULTIMATE.start_glob2_~pathlim.offset)) [2019-01-07 15:20:57,508 WARN L230 ngHoareTripleChecker]: Post: {2147483644#(forall ((v_idx_58 Int) (v_idx_47 Int) (v_idx_59 Int) (v_idx_48 Int) (v_idx_56 Int) (v_idx_45 Int) (v_idx_57 Int) (v_idx_46 Int) (v_idx_54 Int) (v_idx_55 Int) (v_idx_52 Int) (v_idx_53 Int) (v_idx_50 Int) (v_idx_51 Int) (v_idx_60 Int) (v_idx_49 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (or (<= v_b_7_1 v_idx_50) (= v_v_24_1 (select |c_#valid| v_idx_50)) (< v_idx_50 v_b_6_1)) (or (<= v_b_10_1 v_idx_57) (= (select |c_#length| v_idx_57) v_v_29_1)) (not (= c_~tmp.base 0)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= (select v_v_10_1 v_idx_45) v_v_11_1) (or (<= v_b_6_1 v_idx_49) (= (select |c_#valid| v_idx_49) v_v_23_1)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_54) v_v_17_1) (= v_v_3_1 (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_56)) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_60) v_v_1_1) (= v_v_30_1 8) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= v_v_7_1 (select |c_old(#valid)| v_idx_48)) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_53)) (= (select |c_old(#length)| v_idx_55) v_v_2_1) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= v_v_8_1 (select |c_#memory_int| v_idx_52)) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (or (= (select |c_#length| v_idx_59) v_v_31_1) (< v_idx_59 v_b_11_1)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (or (< v_idx_58 v_b_10_1) (= (select |c_#length| v_idx_58) v_v_30_1) (<= v_b_11_1 v_idx_58)) (= v_v_4_1 (select v_v_3_1 v_idx_47)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= (select v_v_8_1 v_idx_46) v_v_9_1) (or (= v_v_25_1 (select |c_#valid| v_idx_51)) (< v_idx_51 v_b_7_1)) (= |c_#NULL.offset| 0))))} [2019-01-07 15:20:57,508 WARN L263 ngHoareTripleChecker]: unsat core / model generation is disabled, enable it to get more details [2019-01-07 15:20:57,509 WARN L268 ngHoareTripleChecker]: -- [2019-01-07 15:20:57,509 WARN L269 ngHoareTripleChecker]: Simplified triple [2019-01-07 15:20:57,693 WARN L270 ngHoareTripleChecker]: Pre: {2147483645#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:20:57,694 WARN L274 ngHoareTripleChecker]: Action: assume !!(glob2_~p~4.base == glob2_~pathlim.base && glob2_~p~4.offset <= glob2_~pathlim.offset);__VERIFIER_assert_#in~cond := (if glob2_~p~4.base == ~tmp.base && glob2_~p~4.offset <= ~tmp.offset then 1 else 0);havoc __VERIFIER_assert_~cond;__VERIFIER_assert_~cond := __VERIFIER_assert_#in~cond; [2019-01-07 15:20:57,694 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (= c_ULTIMATE.start___VERIFIER_assert_~cond_primed |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed|) (= |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed| (ite (and (= c_~tmp.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_~tmp.offset)) 1 0)) (= c_ULTIMATE.start_glob2_~pathlim.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_ULTIMATE.start_glob2_~pathlim.offset)) [2019-01-07 15:20:57,932 WARN L276 ngHoareTripleChecker]: Post: {2147483644#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:20:58,415 WARN L212 ngHoareTripleChecker]: Soundness check inconclusive for the following hoare triple [2019-01-07 15:20:58,415 WARN L217 ngHoareTripleChecker]: Expected: VALID Actual: UNKNOWN [2019-01-07 15:20:58,415 WARN L219 ngHoareTripleChecker]: Solver was "Z3" in version "4.8.3" [2019-01-07 15:20:58,416 WARN L223 ngHoareTripleChecker]: -- [2019-01-07 15:20:58,416 WARN L224 ngHoareTripleChecker]: Pre: {2147483643#(forall ((v_idx_69 Int) (v_idx_67 Int) (v_idx_68 Int) (v_idx_65 Int) (v_idx_76 Int) (v_idx_66 Int) (v_idx_63 Int) (v_idx_74 Int) (v_idx_64 Int) (v_idx_75 Int) (v_idx_61 Int) (v_idx_72 Int) (v_idx_62 Int) (v_idx_73 Int) (v_idx_70 Int) (v_idx_71 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= v_v_7_1 (select |c_old(#valid)| v_idx_64)) (not (= c_~tmp.base 0)) (or (<= v_b_11_1 v_idx_74) (= (select |c_#length| v_idx_74) v_v_30_1) (< v_idx_74 v_b_10_1)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_76) v_v_1_1) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (= v_v_29_1 (select |c_#length| v_idx_73)) (<= v_b_10_1 v_idx_73)) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (or (= (select |c_#length| v_idx_75) v_v_31_1) (< v_idx_75 v_b_11_1)) (= v_v_9_1 (select v_v_8_1 v_idx_62)) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= (select v_v_10_1 v_idx_61) v_v_11_1) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= v_v_17_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_70)) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (or (< v_idx_66 v_b_6_1) (<= v_b_7_1 v_idx_66) (= (select |c_#valid| v_idx_66) v_v_24_1)) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_72) v_v_3_1) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_69)) (or (<= v_b_6_1 v_idx_65) (= (select |c_#valid| v_idx_65) v_v_23_1)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select |c_#memory_int| v_idx_68) v_v_8_1) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (= (select |c_old(#length)| v_idx_71) v_v_2_1) (or (= (select |c_#valid| v_idx_67) v_v_25_1) (< v_idx_67 v_b_7_1)) (= v_v_4_1 (select v_v_3_1 v_idx_63)))))} [2019-01-07 15:20:58,417 WARN L228 ngHoareTripleChecker]: Action: assume !(__VERIFIER_assert_~cond == 0);write~int_old_#memory_int := #memory_int;write~int_#value, write~int_#ptr.base, write~int_#ptr.offset, write~int_#sizeOfWrittenType := 1, glob2_~p~4.base, glob2_~p~4.offset, 4;havoc #memory_int;assume #memory_int == write~int_old_#memory_int[write~int_#ptr.base,write~int_#ptr.offset := write~int_#value];glob2_#t~post0.base, glob2_#t~post0.offset := glob2_~p~4.base, glob2_~p~4.offset;glob2_~p~4.base, glob2_~p~4.offset := glob2_#t~post0.base, glob2_#t~post0.offset + 4;havoc glob2_#t~post0.base, glob2_#t~post0.offset; [2019-01-07 15:20:58,417 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (= |c_#memory_int_primed| (store |c_ULTIMATE.start_write~int_old_#memory_int_primed| |c_ULTIMATE.start_write~int_#ptr.base_primed| (store (select |c_ULTIMATE.start_write~int_old_#memory_int_primed| |c_ULTIMATE.start_write~int_#ptr.base_primed|) |c_ULTIMATE.start_write~int_#ptr.offset_primed| |c_ULTIMATE.start_write~int_#value_primed|))) (= (+ c_ULTIMATE.start_glob2_~p~4.offset 4) c_ULTIMATE.start_glob2_~p~4.offset_primed) (= c_ULTIMATE.start_glob2_~p~4.base c_ULTIMATE.start_glob2_~p~4.base_primed) (= |c_ULTIMATE.start_write~int_#value_primed| 1) (= |c_ULTIMATE.start_write~int_#ptr.offset_primed| c_ULTIMATE.start_glob2_~p~4.offset) (= |c_ULTIMATE.start_write~int_#ptr.base_primed| c_ULTIMATE.start_glob2_~p~4.base) (= |c_ULTIMATE.start_write~int_#sizeOfWrittenType_primed| 4) (not (= 0 c_ULTIMATE.start___VERIFIER_assert_~cond)) (= |c_ULTIMATE.start_write~int_old_#memory_int_primed| |c_#memory_int|)) [2019-01-07 15:20:58,418 WARN L230 ngHoareTripleChecker]: Post: {2147483642#(forall ((v_idx_89 Int) (v_idx_78 Int) (v_idx_79 Int) (v_idx_98 Int) (v_idx_87 Int) (v_idx_88 Int) (v_idx_77 Int) (v_idx_96 Int) (v_idx_85 Int) (v_idx_97 Int) (v_idx_86 Int) (v_idx_94 Int) (v_idx_83 Int) (v_idx_95 Int) (v_idx_84 Int) (v_idx_92 Int) (v_idx_81 Int) (v_idx_93 Int) (v_idx_82 Int) (v_idx_90 Int) (v_idx_91 Int) (v_idx_80 Int)) (exists ((v_b_6_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_b_19_1 Int) (v_v_17_1 Int) (v_v_24_1 Int) (v_v_47_1 Int) (v_v_25_1 Int) (v_v_46_1 Int) (v_v_23_1 Int) (v_v_43_1 (Array Int Int)) (v_v_44_1 (Array Int Int)) (v_v_45_1 (Array Int Int)) (v_v_29_1 Int) (v_v_49_1 Int) (v_v_48_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_b_16_1 Int) (v_b_18_1 Int) (v_b_17_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_50_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (or (< v_idx_97 v_b_18_1) (= (select v_v_44_1 v_idx_97) v_v_48_1) (<= v_b_19_1 v_idx_97)) (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_80) v_v_1_1) (or (< v_idx_89 v_b_16_1) (= v_v_44_1 (select |c_#memory_int| v_idx_89)) (<= v_b_17_1 v_idx_89)) (= v_v_2_1 (select |c_old(#length)| v_idx_92)) (not (= c_~tmp.base 0)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_78) v_v_17_1) (= c_ULTIMATE.start_main_~bound~6.offset 28) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (= 1 v_b_19_1) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= v_v_48_1 1) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_79) v_v_8_1) (= v_v_30_1 8) (= c_~tmp.offset 4) (= c_ULTIMATE.start_glob2_~p~4.offset 4) (= |c_#NULL.base| 0) (= (select v_v_45_1 v_idx_91) v_v_50_1) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (or (<= v_b_6_1 v_idx_84) (= v_v_23_1 (select |c_#valid| v_idx_84))) (or (= (select |c_#length| v_idx_93) v_v_29_1) (<= v_b_10_1 v_idx_93)) (or (< v_idx_86 v_b_7_1) (= (select |c_#valid| v_idx_86) v_v_25_1)) (or (< v_idx_95 v_b_11_1) (= (select |c_#length| v_idx_95) v_v_31_1)) (= 0 v_b_18_1) (= v_v_7_1 (select |c_old(#valid)| v_idx_83)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (= v_b_18_1 0) (= |c_ULTIMATE.start_write~int_#ptr.offset| 0) (not (= |c_ULTIMATE.start_write~int_#ptr.base| 0)) (= |c_ULTIMATE.start_write~int_#value| 1) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (= (select |c_#length| v_idx_94) v_v_30_1) (< v_idx_94 v_b_10_1) (<= v_b_11_1 v_idx_94)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (or (<= v_b_16_1 v_idx_88) (= v_v_43_1 (select |c_#memory_int| v_idx_88))) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (not (= c_ULTIMATE.start___VERIFIER_assert_~cond 0)) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_87)) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (or (< v_idx_85 v_b_6_1) (<= v_b_7_1 v_idx_85) (= (select |c_#valid| v_idx_85) v_v_24_1)) (= |c_ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= v_v_9_1 (select v_v_8_1 v_idx_77)) (or (= (select |c_#memory_int| v_idx_90) v_v_45_1) (< v_idx_90 v_b_17_1)) (or (= (select v_v_44_1 v_idx_96) v_v_47_1) (<= v_b_18_1 v_idx_96)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select v_v_10_1 v_idx_82) v_v_11_1) (= v_b_19_1 1) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= (select v_v_43_1 v_idx_81) v_v_46_1) (= |c_#NULL.offset| 0) (or (= (select v_v_44_1 v_idx_98) v_v_49_1) (< v_idx_98 v_b_19_1)))))} [2019-01-07 15:20:58,418 WARN L263 ngHoareTripleChecker]: unsat core / model generation is disabled, enable it to get more details [2019-01-07 15:20:58,419 WARN L268 ngHoareTripleChecker]: -- [2019-01-07 15:20:58,419 WARN L269 ngHoareTripleChecker]: Simplified triple [2019-01-07 15:20:58,831 WARN L270 ngHoareTripleChecker]: Pre: {2147483643#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:20:58,831 WARN L274 ngHoareTripleChecker]: Action: assume !(__VERIFIER_assert_~cond == 0);write~int_old_#memory_int := #memory_int;write~int_#value, write~int_#ptr.base, write~int_#ptr.offset, write~int_#sizeOfWrittenType := 1, glob2_~p~4.base, glob2_~p~4.offset, 4;havoc #memory_int;assume #memory_int == write~int_old_#memory_int[write~int_#ptr.base,write~int_#ptr.offset := write~int_#value];glob2_#t~post0.base, glob2_#t~post0.offset := glob2_~p~4.base, glob2_~p~4.offset;glob2_~p~4.base, glob2_~p~4.offset := glob2_#t~post0.base, glob2_#t~post0.offset + 4;havoc glob2_#t~post0.base, glob2_#t~post0.offset; [2019-01-07 15:20:58,832 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (= |c_#memory_int_primed| (store |c_ULTIMATE.start_write~int_old_#memory_int_primed| |c_ULTIMATE.start_write~int_#ptr.base_primed| (store (select |c_ULTIMATE.start_write~int_old_#memory_int_primed| |c_ULTIMATE.start_write~int_#ptr.base_primed|) |c_ULTIMATE.start_write~int_#ptr.offset_primed| |c_ULTIMATE.start_write~int_#value_primed|))) (= (+ c_ULTIMATE.start_glob2_~p~4.offset 4) c_ULTIMATE.start_glob2_~p~4.offset_primed) (= c_ULTIMATE.start_glob2_~p~4.base c_ULTIMATE.start_glob2_~p~4.base_primed) (= |c_ULTIMATE.start_write~int_#value_primed| 1) (= |c_ULTIMATE.start_write~int_#ptr.offset_primed| c_ULTIMATE.start_glob2_~p~4.offset) (= |c_ULTIMATE.start_write~int_#ptr.base_primed| c_ULTIMATE.start_glob2_~p~4.base) (= |c_ULTIMATE.start_write~int_#sizeOfWrittenType_primed| 4) (not (= 0 c_ULTIMATE.start___VERIFIER_assert_~cond)) (= |c_ULTIMATE.start_write~int_old_#memory_int_primed| |c_#memory_int|)) [2019-01-07 15:20:59,731 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 100 treesize of output 95 [2019-01-07 15:20:59,753 INFO L267 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2019-01-07 15:20:59,760 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 98 treesize of output 93 [2019-01-07 15:20:59,769 INFO L267 ElimStorePlain]: Start of recursive call 3: End of recursive call: and 1 xjuncts. [2019-01-07 15:20:59,777 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 102 treesize of output 97 [2019-01-07 15:20:59,789 INFO L267 ElimStorePlain]: Start of recursive call 4: End of recursive call: and 1 xjuncts. [2019-01-07 15:20:59,811 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 98 treesize of output 93 [2019-01-07 15:20:59,842 INFO L267 ElimStorePlain]: Start of recursive call 5: End of recursive call: and 1 xjuncts. [2019-01-07 15:21:00,793 INFO L478 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 95 treesize of output 90 [2019-01-07 15:21:00,799 INFO L267 ElimStorePlain]: Start of recursive call 6: End of recursive call: and 1 xjuncts. [2019-01-07 15:21:00,963 INFO L267 ElimStorePlain]: Start of recursive call 1: 2 dim-1 vars, End of recursive call: and 1 xjuncts. [2019-01-07 15:21:00,964 INFO L202 ElimStorePlain]: Needed 6 recursive calls to eliminate 2 variables, input treesize:1975, output treesize:90 [2019-01-07 15:21:00,976 WARN L384 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2019-01-07 15:21:00,977 WARN L385 uantifierElimination]: Input elimination task: ∃ [v_v_44_1, v_prenex_3]. (let ((.cse32 (<= 1 v_prenex_2)) (.cse24 (= (select (select |#memory_int| v_prenex_1) v_prenex_2) 1)) (.cse30 (< v_idx_98 1)) (.cse31 (= 1 (select v_v_44_1 v_idx_97))) (.cse29 (< v_prenex_2 0)) (.cse25 (< v_idx_97 0)) (.cse33 (= (select (select |#memory_int| v_idx_89) v_idx_97) 1)) (.cse0 (not (= ULTIMATE.start_glob2_~pathlim.base 0))) (.cse1 (= |ULTIMATE.start_write~int_#ptr.offset| 0)) (.cse2 (not (= |ULTIMATE.start_write~int_#ptr.base| 0))) (.cse28 (<= 1 v_idx_97)) (.cse3 (not (= ~tmp.base 0))) (.cse4 (= |ULTIMATE.start_write~int_#value| 1)) (.cse5 (= ULTIMATE.start_main_~bound~6.offset 28)) (.cse6 (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0)) (.cse7 (not (= ULTIMATE.start_glob2_~p~4.base 0))) (.cse8 (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0))) (.cse9 (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0))) (.cse10 (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0)) (.cse11 (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0)) (.cse12 (not (= ULTIMATE.start___VERIFIER_assert_~cond 0))) (.cse13 (= ~tmp.offset 4)) (.cse34 (= 1 (select v_prenex_3 v_prenex_2))) (.cse14 (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0))) (.cse15 (= ULTIMATE.start_glob2_~p~4.offset 4)) (.cse16 (= |#NULL.base| 0)) (.cse17 (= |ULTIMATE.start_write~int_#sizeOfWrittenType| 4)) (.cse18 (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28)) (.cse19 (= ULTIMATE.start_glob2_~pathbuf.offset 0)) (.cse20 (= |ULTIMATE.start_#Ultimate.alloc_~size| 8)) (.cse21 (= ULTIMATE.start_glob2_~pathlim.offset 28)) (.cse22 (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0))) (.cse23 (not (= ULTIMATE.start_glob2_~pathbuf.base 0))) (.cse26 (not (= ULTIMATE.start_main_~bound~6.base 0))) (.cse27 (= |#NULL.offset| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse25 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse28 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse29 .cse26 .cse27) (and .cse0 .cse1 .cse30 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse25 .cse26 .cse27) (and .cse0 .cse1 .cse30 .cse2 .cse28 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse31 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse32 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse31 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse25 .cse29 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse32 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse33 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse28 .cse3 .cse32 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse30 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse33 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse32 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse25 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse28 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse24 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse33 .cse20 .cse21 .cse22 .cse23 .cse29 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse33 .cse20 .cse21 .cse22 .cse23 .cse24 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse34 .cse14 .cse15 .cse16 .cse17 .cse31 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse30 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse31 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse31 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse29 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse34 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse25 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse34 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse33 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27) (and .cse0 .cse1 .cse2 .cse28 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse34 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse21 .cse22 .cse23 .cse26 .cse27))) [2019-01-07 15:21:00,978 WARN L386 uantifierElimination]: ElimStorePlain result: ∃ []. (and (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_write~int_#ptr.offset| 0) (not (= |ULTIMATE.start_write~int_#ptr.base| 0)) (not (= ~tmp.base 0)) (= |ULTIMATE.start_write~int_#value| 1) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (not (= ULTIMATE.start___VERIFIER_assert_~cond 0)) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= ULTIMATE.start_glob2_~p~4.offset 4) (= |#NULL.base| 0) (= |ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |#NULL.offset| 0)) [2019-01-07 15:21:00,978 WARN L276 ngHoareTripleChecker]: Post: {2147483642#(and (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_write~int_#ptr.offset| 0) (not (= |ULTIMATE.start_write~int_#ptr.base| 0)) (not (= ~tmp.base 0)) (= |ULTIMATE.start_write~int_#value| 1) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (not (= ULTIMATE.start___VERIFIER_assert_~cond 0)) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= ULTIMATE.start_glob2_~p~4.offset 4) (= |#NULL.base| 0) (= |ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |#NULL.offset| 0))} [2019-01-07 15:21:01,305 WARN L212 ngHoareTripleChecker]: Soundness check inconclusive for the following hoare triple [2019-01-07 15:21:01,305 WARN L217 ngHoareTripleChecker]: Expected: VALID Actual: UNKNOWN [2019-01-07 15:21:01,306 WARN L219 ngHoareTripleChecker]: Solver was "Z3" in version "4.8.3" [2019-01-07 15:21:01,306 WARN L223 ngHoareTripleChecker]: -- [2019-01-07 15:21:01,306 WARN L224 ngHoareTripleChecker]: Pre: {2147483641#(forall ((v_idx_99 Int) (v_idx_104 Int) (v_idx_105 Int) (v_idx_102 Int) (v_idx_113 Int) (v_idx_103 Int) (v_idx_114 Int) (v_idx_108 Int) (v_idx_109 Int) (v_idx_106 Int) (v_idx_107 Int) (v_idx_100 Int) (v_idx_111 Int) (v_idx_101 Int) (v_idx_112 Int) (v_idx_110 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_v_9_1 Int) (v_b_11_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= v_v_3_1 (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_110)) (not (= c_~tmp.base 0)) (= (select v_v_10_1 v_idx_99) v_v_11_1) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= v_v_4_1 (select v_v_3_1 v_idx_101)) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= (select v_v_8_1 v_idx_100) v_v_9_1) (or (<= v_b_10_1 v_idx_111) (= (select |c_#length| v_idx_111) v_v_29_1)) (= (select |c_#memory_int| v_idx_106) v_v_8_1) (= (select |c_old(#length)| v_idx_109) v_v_2_1) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (or (< v_idx_104 v_b_6_1) (<= v_b_7_1 v_idx_104) (= v_v_24_1 (select |c_#valid| v_idx_104))) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (or (<= v_b_6_1 v_idx_103) (= v_v_23_1 (select |c_#valid| v_idx_103))) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= (select |c_old(#memory_int)| v_idx_107) v_v_10_1) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_114) v_v_1_1) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (or (<= v_b_11_1 v_idx_112) (= v_v_30_1 (select |c_#length| v_idx_112)) (< v_idx_112 v_b_10_1)) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (or (= (select |c_#length| v_idx_113) v_v_31_1) (< v_idx_113 v_b_11_1)) (or (< v_idx_105 v_b_7_1) (= v_v_25_1 (select |c_#valid| v_idx_105))) (= v_v_7_1 (select |c_old(#valid)| v_idx_102)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_108) v_v_17_1) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0))))} [2019-01-07 15:21:01,307 WARN L228 ngHoareTripleChecker]: Action: assume __VERIFIER_assert_~cond == 0;assume !false; [2019-01-07 15:21:01,307 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (= 0 c_ULTIMATE.start___VERIFIER_assert_~cond) [2019-01-07 15:21:01,307 WARN L230 ngHoareTripleChecker]: Post: {2147483640#(forall ((v_idx_126 Int) (v_idx_115 Int) (v_idx_127 Int) (v_idx_116 Int) (v_idx_124 Int) (v_idx_125 Int) (v_idx_119 Int) (v_idx_128 Int) (v_idx_117 Int) (v_idx_129 Int) (v_idx_118 Int) (v_idx_130 Int) (v_idx_122 Int) (v_idx_123 Int) (v_idx_120 Int) (v_idx_121 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= c_ULTIMATE.start___VERIFIER_assert_~cond 0) (or (< v_idx_129 v_b_11_1) (= (select |c_#length| v_idx_129) v_v_31_1)) (= (select v_v_3_1 v_idx_117) v_v_4_1) (or (= v_v_24_1 (select |c_#valid| v_idx_120)) (< v_idx_120 v_b_6_1) (<= v_b_7_1 v_idx_120)) (= (select |c_old(#length)| v_idx_125) v_v_2_1) (not (= c_~tmp.base 0)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= v_v_1_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_130)) (= (select v_v_10_1 v_idx_115) v_v_11_1) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= (select v_v_8_1 v_idx_116) v_v_9_1) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (or (= (select |c_#length| v_idx_128) v_v_30_1) (< v_idx_128 v_b_10_1) (<= v_b_11_1 v_idx_128)) (= v_v_7_1 (select |c_old(#valid)| v_idx_118)) (or (= v_v_25_1 (select |c_#valid| v_idx_121)) (< v_idx_121 v_b_7_1)) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (or (<= v_b_10_1 v_idx_127) (= v_v_29_1 (select |c_#length| v_idx_127))) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_126) v_v_3_1) (or (<= v_b_6_1 v_idx_119) (= v_v_23_1 (select |c_#valid| v_idx_119))) (= v_v_8_1 (select |c_#memory_int| v_idx_122)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_123)) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= v_v_17_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_124)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0))))} [2019-01-07 15:21:01,308 WARN L263 ngHoareTripleChecker]: unsat core / model generation is disabled, enable it to get more details [2019-01-07 15:21:01,308 WARN L268 ngHoareTripleChecker]: -- [2019-01-07 15:21:01,309 WARN L269 ngHoareTripleChecker]: Simplified triple [2019-01-07 15:21:01,470 WARN L270 ngHoareTripleChecker]: Pre: {2147483641#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:21:01,471 WARN L274 ngHoareTripleChecker]: Action: assume __VERIFIER_assert_~cond == 0;assume !false; [2019-01-07 15:21:01,471 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (= 0 c_ULTIMATE.start___VERIFIER_assert_~cond) [2019-01-07 15:21:01,535 WARN L276 ngHoareTripleChecker]: Post: {2147483640#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start___VERIFIER_assert_~cond 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:21:02,114 WARN L212 ngHoareTripleChecker]: Soundness check inconclusive for the following hoare triple [2019-01-07 15:21:02,114 WARN L217 ngHoareTripleChecker]: Expected: VALID Actual: UNKNOWN [2019-01-07 15:21:02,115 WARN L219 ngHoareTripleChecker]: Solver was "Z3" in version "4.8.3" [2019-01-07 15:21:02,115 WARN L223 ngHoareTripleChecker]: -- [2019-01-07 15:21:02,115 WARN L224 ngHoareTripleChecker]: Pre: {2147483639#(or (forall ((v_idx_148 Int) (v_idx_159 Int) (v_idx_149 Int) (v_idx_168 Int) (v_idx_157 Int) (v_idx_147 Int) (v_idx_158 Int) (v_idx_162 Int) (v_idx_151 Int) (v_idx_163 Int) (v_idx_152 Int) (v_idx_160 Int) (v_idx_161 Int) (v_idx_150 Int) (v_idx_166 Int) (v_idx_155 Int) (v_idx_167 Int) (v_idx_156 Int) (v_idx_164 Int) (v_idx_153 Int) (v_idx_165 Int) (v_idx_154 Int)) (exists ((v_b_6_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_b_19_1 Int) (v_v_17_1 Int) (v_v_47_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_v_46_1 Int) (v_v_43_1 (Array Int Int)) (v_v_23_1 Int) (v_v_44_1 (Array Int Int)) (v_v_45_1 (Array Int Int)) (v_v_29_1 Int) (v_v_49_1 Int) (v_v_48_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_b_16_1 Int) (v_b_18_1 Int) (v_b_17_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_50_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_148) v_v_17_1) (= (select v_v_10_1 v_idx_152) v_v_11_1) (not (= c_~tmp.base 0)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (or (< v_idx_160 v_b_17_1) (= v_v_45_1 (select |c_#memory_int| v_idx_160))) (or (< v_idx_156 v_b_7_1) (= v_v_25_1 (select |c_#valid| v_idx_156))) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (= 1 v_b_19_1) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= v_v_48_1 1) (= v_v_30_1 8) (= c_~tmp.offset 4) (= c_ULTIMATE.start_glob2_~p~4.offset 4) (= |c_#NULL.base| 0) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= v_v_2_1 (select |c_old(#length)| v_idx_162)) (= v_v_1_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_150)) (= 0 v_b_18_1) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select v_v_8_1 v_idx_147) v_v_9_1) (or (<= v_b_11_1 v_idx_164) (< v_idx_164 v_b_10_1) (= (select |c_#length| v_idx_164) v_v_30_1)) (= (select v_v_45_1 v_idx_161) v_v_50_1) (= (select v_v_43_1 v_idx_151) v_v_46_1) (= v_v_7_1 (select |c_old(#valid)| v_idx_153)) (= v_b_18_1 0) (or (= v_v_31_1 (select |c_#length| v_idx_165)) (< v_idx_165 v_b_11_1)) (= |c_ULTIMATE.start_write~int_#ptr.offset| 0) (or (<= v_b_16_1 v_idx_158) (= (select |c_#memory_int| v_idx_158) v_v_43_1)) (not (= |c_ULTIMATE.start_write~int_#ptr.base| 0)) (or (= (select v_v_44_1 v_idx_166) v_v_47_1) (<= v_b_18_1 v_idx_166)) (= |c_ULTIMATE.start_write~int_#value| 1) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (<= v_b_7_1 v_idx_155) (= v_v_24_1 (select |c_#valid| v_idx_155)) (< v_idx_155 v_b_6_1)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (or (< v_idx_167 v_b_18_1) (<= v_b_19_1 v_idx_167) (= (select v_v_44_1 v_idx_167) v_v_48_1)) (not (= c_ULTIMATE.start___VERIFIER_assert_~cond 0)) (or (< v_idx_159 v_b_16_1) (= v_v_44_1 (select |c_#memory_int| v_idx_159)) (<= v_b_17_1 v_idx_159)) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_157)) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (or (< v_idx_168 v_b_19_1) (= v_v_49_1 (select v_v_44_1 v_idx_168))) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_149) v_v_8_1) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= v_b_19_1 1) (or (<= v_b_10_1 v_idx_163) (= (select |c_#length| v_idx_163) v_v_29_1)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (or (<= v_b_6_1 v_idx_154) (= v_v_23_1 (select |c_#valid| v_idx_154)))))) (forall ((v_idx_137 Int) (v_idx_138 Int) (v_idx_146 Int) (v_idx_135 Int) (v_idx_136 Int) (v_idx_139 Int) (v_idx_140 Int) (v_idx_141 Int) (v_idx_144 Int) (v_idx_133 Int) (v_idx_145 Int) (v_idx_134 Int) (v_idx_142 Int) (v_idx_131 Int) (v_idx_143 Int) (v_idx_132 Int)) (exists ((v_b_6_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (or (<= v_b_6_1 v_idx_138) (= v_v_23_1 (select |c_#valid| v_idx_138))) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= (select |c_#memory_int| v_idx_141) v_v_8_1) (not (= c_~tmp.base 0)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= (select v_v_10_1 v_idx_136) v_v_11_1) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_142)) (or (= (select |c_#length| v_idx_145) v_v_30_1) (< v_idx_145 v_b_10_1) (<= v_b_11_1 v_idx_145)) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (= v_v_4_1 (select v_v_3_1 v_idx_132)) (or (<= v_b_10_1 v_idx_144) (= (select |c_#length| v_idx_144) v_v_29_1)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_133) v_v_17_1) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= (select v_v_8_1 v_idx_131) v_v_9_1) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_134) v_v_3_1) (= v_v_7_1 (select |c_old(#valid)| v_idx_137)) (= (select |c_old(#length)| v_idx_143) v_v_2_1) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= v_v_1_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_135)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (or (= v_v_25_1 (select |c_#valid| v_idx_140)) (< v_idx_140 v_b_7_1)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (or (= (select |c_#length| v_idx_146) v_v_31_1) (< v_idx_146 v_b_11_1)) (= |c_#NULL.offset| 0) (or (< v_idx_139 v_b_6_1) (= v_v_24_1 (select |c_#valid| v_idx_139)) (<= v_b_7_1 v_idx_139))))))} [2019-01-07 15:21:02,116 WARN L228 ngHoareTripleChecker]: Action: assume !!(glob2_~p~4.base == glob2_~pathlim.base && glob2_~p~4.offset <= glob2_~pathlim.offset);__VERIFIER_assert_#in~cond := (if glob2_~p~4.base == ~tmp.base && glob2_~p~4.offset <= ~tmp.offset then 1 else 0);havoc __VERIFIER_assert_~cond;__VERIFIER_assert_~cond := __VERIFIER_assert_#in~cond; [2019-01-07 15:21:02,116 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (= c_ULTIMATE.start___VERIFIER_assert_~cond_primed |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed|) (= |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed| (ite (and (= c_~tmp.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_~tmp.offset)) 1 0)) (= c_ULTIMATE.start_glob2_~pathlim.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_ULTIMATE.start_glob2_~pathlim.offset)) [2019-01-07 15:21:02,116 WARN L230 ngHoareTripleChecker]: Post: {2147483638#(or (forall ((v_idx_180 Int) (v_idx_181 Int) (v_idx_170 Int) (v_idx_179 Int) (v_idx_169 Int) (v_idx_184 Int) (v_idx_173 Int) (v_idx_174 Int) (v_idx_182 Int) (v_idx_171 Int) (v_idx_183 Int) (v_idx_172 Int) (v_idx_177 Int) (v_idx_178 Int) (v_idx_175 Int) (v_idx_176 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (= v_v_10_1 (select |c_old(#memory_int)| v_idx_177)) (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= (select v_v_10_1 v_idx_169) v_v_11_1) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= v_v_4_1 (select v_v_3_1 v_idx_171)) (or (<= v_b_6_1 v_idx_173) (= v_v_23_1 (select |c_#valid| v_idx_173))) (not (= c_~tmp.base 0)) (or (<= v_b_7_1 v_idx_174) (< v_idx_174 v_b_6_1) (= v_v_24_1 (select |c_#valid| v_idx_174))) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= v_v_1_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_184)) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_180) v_v_3_1) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= v_v_7_1 (select |c_old(#valid)| v_idx_172)) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (or (= v_v_25_1 (select |c_#valid| v_idx_175)) (< v_idx_175 v_b_7_1)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_178) v_v_17_1) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (or (= (select |c_#length| v_idx_183) v_v_31_1) (< v_idx_183 v_b_11_1)) (= v_v_9_1 (select v_v_8_1 v_idx_170)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select |c_old(#length)| v_idx_179) v_v_2_1) (or (= v_v_29_1 (select |c_#length| v_idx_181)) (<= v_b_10_1 v_idx_181)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (or (<= v_b_11_1 v_idx_182) (= (select |c_#length| v_idx_182) v_v_30_1) (< v_idx_182 v_b_10_1)) (= (select |c_#memory_int| v_idx_176) v_v_8_1)))) (forall ((v_idx_191 Int) (v_idx_192 Int) (v_idx_190 Int) (v_idx_203 Int) (v_idx_204 Int) (v_idx_201 Int) (v_idx_202 Int) (v_idx_205 Int) (v_idx_206 Int) (v_idx_195 Int) (v_idx_185 Int) (v_idx_196 Int) (v_idx_193 Int) (v_idx_194 Int) (v_idx_188 Int) (v_idx_199 Int) (v_idx_189 Int) (v_idx_200 Int) (v_idx_186 Int) (v_idx_197 Int) (v_idx_187 Int) (v_idx_198 Int)) (exists ((v_b_6_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_b_19_1 Int) (v_v_17_1 Int) (v_v_47_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_v_46_1 Int) (v_v_43_1 (Array Int Int)) (v_v_23_1 Int) (v_v_44_1 (Array Int Int)) (v_v_45_1 (Array Int Int)) (v_v_29_1 Int) (v_v_49_1 Int) (v_v_48_1 Int) (v_v_9_1 Int) (v_b_11_1 Int) (v_b_16_1 Int) (v_b_18_1 Int) (v_v_8_1 (Array Int Int)) (v_b_17_1 Int) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_50_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (or (= (select v_v_44_1 v_idx_205) v_v_48_1) (<= v_b_19_1 v_idx_205) (< v_idx_205 v_b_18_1)) (= (select v_v_45_1 v_idx_199) v_v_50_1) (not (= c_~tmp.base 0)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (= 1 v_b_19_1) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= v_v_48_1 1) (= v_v_30_1 8) (= c_~tmp.offset 4) (= c_ULTIMATE.start_glob2_~p~4.offset 4) (= |c_#NULL.base| 0) (= v_v_9_1 (select v_v_8_1 v_idx_185)) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (= 0 v_b_18_1) (= v_v_8_1 (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_187)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_188) v_v_1_1) (= (select |c_old(#memory_int)| v_idx_195) v_v_10_1) (= v_b_18_1 0) (= |c_ULTIMATE.start_write~int_#ptr.offset| 0) (not (= |c_ULTIMATE.start_write~int_#ptr.base| 0)) (or (= (select v_v_44_1 v_idx_204) v_v_47_1) (<= v_b_18_1 v_idx_204)) (= |c_ULTIMATE.start_write~int_#value| 1) (or (= v_v_45_1 (select |c_#memory_int| v_idx_198)) (< v_idx_198 v_b_17_1)) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (= (select v_v_44_1 v_idx_206) v_v_49_1) (< v_idx_206 v_b_19_1)) (or (<= v_b_7_1 v_idx_193) (< v_idx_193 v_b_6_1) (= v_v_24_1 (select |c_#valid| v_idx_193))) (or (= (select |c_#length| v_idx_201) v_v_29_1) (<= v_b_10_1 v_idx_201)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (or (< v_idx_194 v_b_7_1) (= v_v_25_1 (select |c_#valid| v_idx_194))) (or (< v_idx_202 v_b_10_1) (= (select |c_#length| v_idx_202) v_v_30_1) (<= v_b_11_1 v_idx_202)) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (or (= v_v_43_1 (select |c_#memory_int| v_idx_196)) (<= v_b_16_1 v_idx_196)) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= v_v_24_1 1) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_186) v_v_17_1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= v_v_2_1 (select |c_old(#length)| v_idx_200)) (or (= (select |c_#length| v_idx_203) v_v_31_1) (< v_idx_203 v_b_11_1)) (= (select v_v_43_1 v_idx_189) v_v_46_1) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select |c_old(#valid)| v_idx_191) v_v_7_1) (or (< v_idx_197 v_b_16_1) (<= v_b_17_1 v_idx_197) (= v_v_44_1 (select |c_#memory_int| v_idx_197))) (or (<= v_b_6_1 v_idx_192) (= v_v_23_1 (select |c_#valid| v_idx_192))) (= v_b_19_1 1) (= (select v_v_10_1 v_idx_190) v_v_11_1) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0)))))} [2019-01-07 15:21:02,116 WARN L263 ngHoareTripleChecker]: unsat core / model generation is disabled, enable it to get more details [2019-01-07 15:21:02,117 WARN L268 ngHoareTripleChecker]: -- [2019-01-07 15:21:02,117 WARN L269 ngHoareTripleChecker]: Simplified triple [2019-01-07 15:21:08,277 WARN L181 SmtUtils]: Spent 6.16 s on a formula simplification that was a NOOP. DAG size: 280 [2019-01-07 15:21:08,277 WARN L270 ngHoareTripleChecker]: Pre: {2147483639#(or (forall ((v_idx_148 Int) (v_idx_159 Int) (v_idx_149 Int) (v_idx_168 Int) (v_idx_157 Int) (v_idx_147 Int) (v_idx_158 Int) (v_idx_162 Int) (v_idx_151 Int) (v_idx_163 Int) (v_idx_152 Int) (v_idx_160 Int) (v_idx_161 Int) (v_idx_150 Int) (v_idx_166 Int) (v_idx_155 Int) (v_idx_167 Int) (v_idx_156 Int) (v_idx_164 Int) (v_idx_153 Int) (v_idx_165 Int) (v_idx_154 Int)) (exists ((v_b_6_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_b_19_1 Int) (v_v_17_1 Int) (v_v_47_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_v_46_1 Int) (v_v_43_1 (Array Int Int)) (v_v_23_1 Int) (v_v_44_1 (Array Int Int)) (v_v_45_1 (Array Int Int)) (v_v_29_1 Int) (v_v_49_1 Int) (v_v_48_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_b_16_1 Int) (v_b_18_1 Int) (v_b_17_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_50_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= (select |ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_148) v_v_17_1) (= (select v_v_10_1 v_idx_152) v_v_11_1) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (or (< v_idx_160 v_b_17_1) (= v_v_45_1 (select |#memory_int| v_idx_160))) (or (< v_idx_156 v_b_7_1) (= v_v_25_1 (select |#valid| v_idx_156))) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (= 1 v_b_19_1) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= v_v_48_1 1) (= v_v_30_1 8) (= ~tmp.offset 4) (= ULTIMATE.start_glob2_~p~4.offset 4) (= |#NULL.base| 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (= v_v_2_1 (select |old(#length)| v_idx_162)) (= v_v_1_1 (select |ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_150)) (= 0 v_b_18_1) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select v_v_8_1 v_idx_147) v_v_9_1) (or (<= v_b_11_1 v_idx_164) (< v_idx_164 v_b_10_1) (= (select |#length| v_idx_164) v_v_30_1)) (= (select v_v_45_1 v_idx_161) v_v_50_1) (= (select v_v_43_1 v_idx_151) v_v_46_1) (= v_v_7_1 (select |old(#valid)| v_idx_153)) (= v_b_18_1 0) (or (= v_v_31_1 (select |#length| v_idx_165)) (< v_idx_165 v_b_11_1)) (= |ULTIMATE.start_write~int_#ptr.offset| 0) (or (<= v_b_16_1 v_idx_158) (= (select |#memory_int| v_idx_158) v_v_43_1)) (not (= |ULTIMATE.start_write~int_#ptr.base| 0)) (or (= (select v_v_44_1 v_idx_166) v_v_47_1) (<= v_b_18_1 v_idx_166)) (= |ULTIMATE.start_write~int_#value| 1) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (<= v_b_7_1 v_idx_155) (= v_v_24_1 (select |#valid| v_idx_155)) (< v_idx_155 v_b_6_1)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (or (< v_idx_167 v_b_18_1) (<= v_b_19_1 v_idx_167) (= (select v_v_44_1 v_idx_167) v_v_48_1)) (not (= ULTIMATE.start___VERIFIER_assert_~cond 0)) (or (< v_idx_159 v_b_16_1) (= v_v_44_1 (select |#memory_int| v_idx_159)) (<= v_b_17_1 v_idx_159)) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= v_v_10_1 (select |old(#memory_int)| v_idx_157)) (= v_v_24_1 1) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (or (< v_idx_168 v_b_19_1) (= v_v_49_1 (select v_v_44_1 v_idx_168))) (= (select |ULTIMATE.start_write~int_old_#memory_int| v_idx_149) v_v_8_1) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= v_b_19_1 1) (or (<= v_b_10_1 v_idx_163) (= (select |#length| v_idx_163) v_v_29_1)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |#NULL.offset| 0) (or (<= v_b_6_1 v_idx_154) (= v_v_23_1 (select |#valid| v_idx_154)))))) (forall ((v_idx_137 Int) (v_idx_138 Int) (v_idx_146 Int) (v_idx_135 Int) (v_idx_136 Int) (v_idx_139 Int) (v_idx_140 Int) (v_idx_141 Int) (v_idx_144 Int) (v_idx_133 Int) (v_idx_145 Int) (v_idx_134 Int) (v_idx_142 Int) (v_idx_131 Int) (v_idx_143 Int) (v_idx_132 Int)) (exists ((v_b_6_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (or (<= v_b_6_1 v_idx_138) (= v_v_23_1 (select |#valid| v_idx_138))) (= ULTIMATE.start_glob2_~p~4.offset 0) (= (select |#memory_int| v_idx_141) v_v_8_1) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= (select v_v_10_1 v_idx_136) v_v_11_1) (= v_v_10_1 (select |old(#memory_int)| v_idx_142)) (or (= (select |#length| v_idx_145) v_v_30_1) (< v_idx_145 v_b_10_1) (<= v_b_11_1 v_idx_145)) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (= v_v_4_1 (select v_v_3_1 v_idx_132)) (or (<= v_b_10_1 v_idx_144) (= (select |#length| v_idx_144) v_v_29_1)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= (select |ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_133) v_v_17_1) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |#NULL.base| 0) (= v_v_24_1 1) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (= (select v_v_8_1 v_idx_131) v_v_9_1) (= (select |ULTIMATE.start_write~int_old_#memory_int| v_idx_134) v_v_3_1) (= v_v_7_1 (select |old(#valid)| v_idx_137)) (= (select |old(#length)| v_idx_143) v_v_2_1) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= v_v_1_1 (select |ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_135)) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (or (= v_v_25_1 (select |#valid| v_idx_140)) (< v_idx_140 v_b_7_1)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (or (= (select |#length| v_idx_146) v_v_31_1) (< v_idx_146 v_b_11_1)) (= |#NULL.offset| 0) (or (< v_idx_139 v_b_6_1) (= v_v_24_1 (select |#valid| v_idx_139)) (<= v_b_7_1 v_idx_139))))))} [2019-01-07 15:21:08,278 WARN L274 ngHoareTripleChecker]: Action: assume !!(glob2_~p~4.base == glob2_~pathlim.base && glob2_~p~4.offset <= glob2_~pathlim.offset);__VERIFIER_assert_#in~cond := (if glob2_~p~4.base == ~tmp.base && glob2_~p~4.offset <= ~tmp.offset then 1 else 0);havoc __VERIFIER_assert_~cond;__VERIFIER_assert_~cond := __VERIFIER_assert_#in~cond; [2019-01-07 15:21:08,278 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: (and (= c_ULTIMATE.start___VERIFIER_assert_~cond_primed |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed|) (= |c_ULTIMATE.start___VERIFIER_assert_#in~cond_primed| (ite (and (= c_~tmp.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_~tmp.offset)) 1 0)) (= c_ULTIMATE.start_glob2_~pathlim.base c_ULTIMATE.start_glob2_~p~4.base) (<= c_ULTIMATE.start_glob2_~p~4.offset c_ULTIMATE.start_glob2_~pathlim.offset)) [2019-01-07 15:21:14,425 WARN L181 SmtUtils]: Spent 6.15 s on a formula simplification that was a NOOP. DAG size: 277 [2019-01-07 15:21:14,425 WARN L276 ngHoareTripleChecker]: Post: {2147483638#(or (forall ((v_idx_180 Int) (v_idx_181 Int) (v_idx_170 Int) (v_idx_179 Int) (v_idx_169 Int) (v_idx_184 Int) (v_idx_173 Int) (v_idx_174 Int) (v_idx_182 Int) (v_idx_171 Int) (v_idx_183 Int) (v_idx_172 Int) (v_idx_177 Int) (v_idx_178 Int) (v_idx_175 Int) (v_idx_176 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_b_7_1 Int) (v_v_25_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (= v_v_10_1 (select |old(#memory_int)| v_idx_177)) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= (select v_v_10_1 v_idx_169) v_v_11_1) (= ULTIMATE.start_glob2_~p~4.offset 0) (= v_v_4_1 (select v_v_3_1 v_idx_171)) (or (<= v_b_6_1 v_idx_173) (= v_v_23_1 (select |#valid| v_idx_173))) (not (= ~tmp.base 0)) (or (<= v_b_7_1 v_idx_174) (< v_idx_174 v_b_6_1) (= v_v_24_1 (select |#valid| v_idx_174))) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= v_v_1_1 (select |ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_184)) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= (select |ULTIMATE.start_write~int_old_#memory_int| v_idx_180) v_v_3_1) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |#NULL.base| 0) (= v_v_24_1 1) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= v_v_7_1 (select |old(#valid)| v_idx_172)) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (or (= v_v_25_1 (select |#valid| v_idx_175)) (< v_idx_175 v_b_7_1)) (= (select |ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_178) v_v_17_1) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (or (= (select |#length| v_idx_183) v_v_31_1) (< v_idx_183 v_b_11_1)) (= v_v_9_1 (select v_v_8_1 v_idx_170)) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select |old(#length)| v_idx_179) v_v_2_1) (or (= v_v_29_1 (select |#length| v_idx_181)) (<= v_b_10_1 v_idx_181)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |#NULL.offset| 0) (or (<= v_b_11_1 v_idx_182) (= (select |#length| v_idx_182) v_v_30_1) (< v_idx_182 v_b_10_1)) (= (select |#memory_int| v_idx_176) v_v_8_1)))) (forall ((v_idx_191 Int) (v_idx_192 Int) (v_idx_190 Int) (v_idx_203 Int) (v_idx_204 Int) (v_idx_201 Int) (v_idx_202 Int) (v_idx_205 Int) (v_idx_206 Int) (v_idx_195 Int) (v_idx_185 Int) (v_idx_196 Int) (v_idx_193 Int) (v_idx_194 Int) (v_idx_188 Int) (v_idx_199 Int) (v_idx_189 Int) (v_idx_200 Int) (v_idx_186 Int) (v_idx_197 Int) (v_idx_187 Int) (v_idx_198 Int)) (exists ((v_b_6_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_b_19_1 Int) (v_v_17_1 Int) (v_v_47_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_v_46_1 Int) (v_v_43_1 (Array Int Int)) (v_v_23_1 Int) (v_v_44_1 (Array Int Int)) (v_v_45_1 (Array Int Int)) (v_v_29_1 Int) (v_v_49_1 Int) (v_v_48_1 Int) (v_v_9_1 Int) (v_b_11_1 Int) (v_b_16_1 Int) (v_b_18_1 Int) (v_v_8_1 (Array Int Int)) (v_b_17_1 Int) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_50_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (or (= (select v_v_44_1 v_idx_205) v_v_48_1) (<= v_b_19_1 v_idx_205) (< v_idx_205 v_b_18_1)) (= (select v_v_45_1 v_idx_199) v_v_50_1) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (= 1 v_b_19_1) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= v_v_48_1 1) (= v_v_30_1 8) (= ~tmp.offset 4) (= ULTIMATE.start_glob2_~p~4.offset 4) (= |#NULL.base| 0) (= v_v_9_1 (select v_v_8_1 v_idx_185)) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (= 0 v_b_18_1) (= v_v_8_1 (select |ULTIMATE.start_write~int_old_#memory_int| v_idx_187)) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (= (select |ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_188) v_v_1_1) (= (select |old(#memory_int)| v_idx_195) v_v_10_1) (= v_b_18_1 0) (= |ULTIMATE.start_write~int_#ptr.offset| 0) (not (= |ULTIMATE.start_write~int_#ptr.base| 0)) (or (= (select v_v_44_1 v_idx_204) v_v_47_1) (<= v_b_18_1 v_idx_204)) (= |ULTIMATE.start_write~int_#value| 1) (or (= v_v_45_1 (select |#memory_int| v_idx_198)) (< v_idx_198 v_b_17_1)) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (= (select v_v_44_1 v_idx_206) v_v_49_1) (< v_idx_206 v_b_19_1)) (or (<= v_b_7_1 v_idx_193) (< v_idx_193 v_b_6_1) (= v_v_24_1 (select |#valid| v_idx_193))) (or (= (select |#length| v_idx_201) v_v_29_1) (<= v_b_10_1 v_idx_201)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (or (< v_idx_194 v_b_7_1) (= v_v_25_1 (select |#valid| v_idx_194))) (or (< v_idx_202 v_b_10_1) (= (select |#length| v_idx_202) v_v_30_1) (<= v_b_11_1 v_idx_202)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (or (= v_v_43_1 (select |#memory_int| v_idx_196)) (<= v_b_16_1 v_idx_196)) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= v_v_24_1 1) (= (select |ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_186) v_v_17_1) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= v_v_2_1 (select |old(#length)| v_idx_200)) (or (= (select |#length| v_idx_203) v_v_31_1) (< v_idx_203 v_b_11_1)) (= (select v_v_43_1 v_idx_189) v_v_46_1) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select |old(#valid)| v_idx_191) v_v_7_1) (or (< v_idx_197 v_b_16_1) (<= v_b_17_1 v_idx_197) (= v_v_44_1 (select |#memory_int| v_idx_197))) (or (<= v_b_6_1 v_idx_192) (= v_v_23_1 (select |#valid| v_idx_192))) (= v_b_19_1 1) (= (select v_v_10_1 v_idx_190) v_v_11_1) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |#NULL.offset| 0)))))} [2019-01-07 15:21:15,848 WARN L212 ngHoareTripleChecker]: Soundness check inconclusive for the following hoare triple [2019-01-07 15:21:15,849 WARN L217 ngHoareTripleChecker]: Expected: VALID Actual: UNKNOWN [2019-01-07 15:21:15,849 WARN L219 ngHoareTripleChecker]: Solver was "Z3" in version "4.8.3" [2019-01-07 15:21:15,849 WARN L223 ngHoareTripleChecker]: -- [2019-01-07 15:21:15,849 WARN L224 ngHoareTripleChecker]: Pre: {2147483637#(forall ((v_idx_209 Int) (v_idx_214 Int) (v_idx_215 Int) (v_idx_212 Int) (v_idx_213 Int) (v_idx_218 Int) (v_idx_207 Int) (v_idx_219 Int) (v_idx_208 Int) (v_idx_216 Int) (v_idx_217 Int) (v_idx_221 Int) (v_idx_210 Int) (v_idx_222 Int) (v_idx_211 Int) (v_idx_220 Int)) (exists ((v_b_6_1 Int) (v_v_24_1 Int) (v_v_25_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= v_v_7_1 (select |c_old(#valid)| v_idx_210)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= c_ULTIMATE.start___VERIFIER_assert_~cond 0) (or (< v_idx_220 v_b_10_1) (<= v_b_11_1 v_idx_220) (= (select |c_#length| v_idx_220) v_v_30_1)) (not (= c_~tmp.base 0)) (= v_v_1_1 (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_222)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (or (= (select |c_#length| v_idx_221) v_v_31_1) (< v_idx_221 v_b_11_1)) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (or (<= v_b_6_1 v_idx_211) (= v_v_23_1 (select |c_#valid| v_idx_211))) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (= (select |c_#memory_int| v_idx_214) v_v_8_1) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= v_v_9_1 (select v_v_8_1 v_idx_208)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_216) v_v_17_1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (or (= v_v_25_1 (select |c_#valid| v_idx_213)) (< v_idx_213 v_b_7_1)) (= (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_218) v_v_3_1) (or (= v_v_24_1 (select |c_#valid| v_idx_212)) (<= v_b_7_1 v_idx_212) (< v_idx_212 v_b_6_1)) (or (<= v_b_10_1 v_idx_219) (= (select |c_#length| v_idx_219) v_v_29_1)) (= v_v_11_1 (select v_v_10_1 v_idx_207)) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_215)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= (select |c_old(#length)| v_idx_217) v_v_2_1) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (= v_v_4_1 (select v_v_3_1 v_idx_209)))))} [2019-01-07 15:21:15,849 WARN L228 ngHoareTripleChecker]: Action: assume !false; [2019-01-07 15:21:15,850 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: true [2019-01-07 15:21:15,850 WARN L230 ngHoareTripleChecker]: Post: {2147483636#(forall ((v_idx_225 Int) (v_idx_236 Int) (v_idx_226 Int) (v_idx_237 Int) (v_idx_223 Int) (v_idx_234 Int) (v_idx_224 Int) (v_idx_235 Int) (v_idx_229 Int) (v_idx_227 Int) (v_idx_238 Int) (v_idx_228 Int) (v_idx_232 Int) (v_idx_233 Int) (v_idx_230 Int) (v_idx_231 Int)) (exists ((v_v_24_1 Int) (v_b_6_1 Int) (v_v_25_1 Int) (v_b_7_1 Int) (v_v_10_1 (Array Int Int)) (v_v_11_1 Int) (v_v_23_1 Int) (v_v_31_1 Int) (v_v_30_1 Int) (v_v_17_1 Int) (v_v_29_1 Int) (v_b_11_1 Int) (v_v_9_1 Int) (v_v_8_1 (Array Int Int)) (v_v_1_1 Int) (v_v_2_1 Int) (v_v_3_1 (Array Int Int)) (v_v_4_1 Int) (v_b_10_1 Int) (v_v_7_1 Int)) (and (or (= (select |c_#length| v_idx_235) v_v_29_1) (<= v_b_10_1 v_idx_235)) (not (= c_ULTIMATE.start_glob2_~pathlim.base 0)) (= c_ULTIMATE.start_glob2_~p~4.offset 0) (= c_ULTIMATE.start___VERIFIER_assert_~cond 0) (= v_v_8_1 (select |c_#memory_int| v_idx_230)) (= v_v_7_1 (select |c_old(#valid)| v_idx_226)) (not (= c_~tmp.base 0)) (= c_ULTIMATE.start_main_~bound~6.offset 28) (= |c_ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= v_v_3_1 (select |c_ULTIMATE.start_write~int_old_#memory_int| v_idx_234)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#length| v_idx_238) v_v_1_1) (or (<= v_b_11_1 v_idx_236) (= (select |c_#length| v_idx_236) v_v_30_1) (< v_idx_236 v_b_10_1)) (not (= |c_ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= c_ULTIMATE.start_glob2_~p~4.base 0)) (not (= |c_ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |c_ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (= |c_ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= v_v_30_1 8) (or (= v_v_25_1 (select |c_#valid| v_idx_229)) (< v_idx_229 v_b_7_1)) (= v_v_9_1 (select v_v_8_1 v_idx_224)) (= c_~tmp.offset 4) (not (= |c_ULTIMATE.start_glob2_#in~pathbuf.base| 0)) (= |c_#NULL.base| 0) (= v_v_24_1 1) (= |c_ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= c_ULTIMATE.start_glob2_~pathbuf.offset 0) (or (= v_v_24_1 (select |c_#valid| v_idx_228)) (< v_idx_228 v_b_6_1) (<= v_b_7_1 v_idx_228)) (or (= (select |c_#length| v_idx_237) v_v_31_1) (< v_idx_237 v_b_11_1)) (= (select v_v_3_1 v_idx_225) v_v_4_1) (= v_v_2_1 (select |c_old(#length)| v_idx_233)) (= |c_ULTIMATE.start_#Ultimate.alloc_~size| 8) (= c_ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |c_ULTIMATE.start_main_~#pathbuf~6.base| 0)) (= v_v_11_1 (select v_v_10_1 v_idx_223)) (not (= c_ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= c_ULTIMATE.start_main_~bound~6.base 0)) (= |c_#NULL.offset| 0) (= v_v_10_1 (select |c_old(#memory_int)| v_idx_231)) (or (= v_v_23_1 (select |c_#valid| v_idx_227)) (<= v_b_6_1 v_idx_227)) (= (select |c_ULTIMATE.start_#Ultimate.alloc_old_#valid| v_idx_232) v_v_17_1))))} [2019-01-07 15:21:15,850 WARN L263 ngHoareTripleChecker]: unsat core / model generation is disabled, enable it to get more details [2019-01-07 15:21:15,851 WARN L268 ngHoareTripleChecker]: -- [2019-01-07 15:21:15,851 WARN L269 ngHoareTripleChecker]: Simplified triple [2019-01-07 15:21:15,925 WARN L270 ngHoareTripleChecker]: Pre: {2147483637#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start___VERIFIER_assert_~cond 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:21:15,925 WARN L274 ngHoareTripleChecker]: Action: assume !false; [2019-01-07 15:21:15,925 WARN L184 hOps$ForEachOp$OfRef]: ActionStr: true [2019-01-07 15:21:15,978 WARN L276 ngHoareTripleChecker]: Post: {2147483636#(and (= |#NULL.base| 0) (not (= ULTIMATE.start_glob2_~pathlim.base 0)) (= |ULTIMATE.start_glob2_#in~pathlim.offset| 28) (= ULTIMATE.start_glob2_~p~4.offset 0) (= ULTIMATE.start___VERIFIER_assert_~cond 0) (= ULTIMATE.start_glob2_~pathbuf.offset 0) (not (= ~tmp.base 0)) (= ULTIMATE.start_main_~bound~6.offset 28) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| 0) (= |ULTIMATE.start_#Ultimate.alloc_~size| 8) (= ULTIMATE.start_glob2_~pathlim.offset 28) (not (= |ULTIMATE.start_glob2_#in~pathlim.base| 0)) (not (= ULTIMATE.start_glob2_~p~4.base 0)) (not (= |ULTIMATE.start_main_~#pathbuf~6.base| 0)) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= |ULTIMATE.start_glob2_#in~pathbuf.offset| 0) (not (= ULTIMATE.start_glob2_~pathbuf.base 0)) (not (= ULTIMATE.start_main_~bound~6.base 0)) (= |ULTIMATE.start_main_~#pathbuf~6.offset| 0) (= |#NULL.offset| 0) (= ~tmp.offset 4) (not (= |ULTIMATE.start_glob2_#in~pathbuf.base| 0)))} [2019-01-07 15:21:15,982 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2 has thrown an exception: java.lang.AssertionError: inappropriate decl info at de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.Boogie2SmtSymbolTable.getBoogieVar(Boogie2SmtSymbolTable.java:240) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.transformula.poorman.Boogie2SmtSymbolTableTmpVars.getBoogieVar(Boogie2SmtSymbolTableTmpVars.java:112) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.getBoogieVar(NonrelationalEvaluator.java:204) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.visit(NonrelationalEvaluator.java:158) at de.uni_freiburg.informatik.ultimate.boogie.BoogieVisitor.processExpression(BoogieVisitor.java:369) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.processExpression(NonrelationalEvaluator.java:101) at de.uni_freiburg.informatik.ultimate.boogie.BoogieTransformer.processExpression(BoogieTransformer.java:688) at de.uni_freiburg.informatik.ultimate.boogie.BoogieVisitor.processExpression(BoogieVisitor.java:391) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.processExpression(NonrelationalEvaluator.java:101) at de.uni_freiburg.informatik.ultimate.boogie.BoogieTransformer.processExpression(BoogieTransformer.java:681) at de.uni_freiburg.informatik.ultimate.boogie.BoogieVisitor.processExpression(BoogieVisitor.java:391) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.processExpression(NonrelationalEvaluator.java:101) at de.uni_freiburg.informatik.ultimate.boogie.BoogieTransformer.processExpression(BoogieTransformer.java:681) at de.uni_freiburg.informatik.ultimate.boogie.BoogieVisitor.processExpression(BoogieVisitor.java:391) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.processExpression(NonrelationalEvaluator.java:101) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.createEvaluator(NonrelationalEvaluator.java:72) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalEvaluator.evaluate(NonrelationalEvaluator.java:81) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalPostOperator.evaluate(NonrelationalPostOperator.java:184) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.nonrelational.NonrelationalPostOperator.evaluate(NonrelationalPostOperator.java:1) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.compound.CompoundDomainPostOperator.evaluate(CompoundDomainPostOperator.java:323) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.compound.CompoundDomainPostOperator.evaluate(CompoundDomainPostOperator.java:1) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainToolkit.evaluate(ArrayDomainToolkit.java:168) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainState.isTrueInSubstate(ArrayDomainState.java:1315) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainState.simplifySegmentation(ArrayDomainState.java:1252) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainState.simplify(ArrayDomainState.java:1325) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainStatementProcessor.processAssume(ArrayDomainStatementProcessor.java:62) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainStatementProcessor.process(ArrayDomainStatementProcessor.java:45) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainPostOperator.handleInternalTransition(ArrayDomainPostOperator.java:124) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainPostOperator.apply(ArrayDomainPostOperator.java:74) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.domain.array.ArrayDomainPostOperator.apply(ArrayDomainPostOperator.java:1) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.absint.DisjunctiveAbstractState.lambda$17(DisjunctiveAbstractState.java:323) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.absint.DisjunctiveAbstractState.mapCollection(DisjunctiveAbstractState.java:519) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.absint.DisjunctiveAbstractState.apply(DisjunctiveAbstractState.java:323) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.algorithm.FixpointEngine.calculateAbstractPost(FixpointEngine.java:249) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.algorithm.FixpointEngine.calculateFixpoint(FixpointEngine.java:134) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.algorithm.FixpointEngine.run(FixpointEngine.java:105) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.tool.AbstractInterpreter.run(AbstractInterpreter.java:109) at de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2.AbstractInterpretationRcfgObserver.process(AbstractInterpretationRcfgObserver.java:73) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.CFGWalker.runObserver(CFGWalker.java:57) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:156) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2019-01-07 15:21:15,986 INFO L168 Benchmark]: Toolchain (without parser) took 20401.45 ms. Allocated memory was 1.5 GB in the beginning and 1.6 GB in the end (delta: 15.7 MB). Free memory was 1.5 GB in the beginning and 1.4 GB in the end (delta: 82.8 MB). Peak memory consumption was 98.6 MB. Max. memory is 7.1 GB. [2019-01-07 15:21:15,988 INFO L168 Benchmark]: Boogie PL CUP Parser took 0.20 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2019-01-07 15:21:15,988 INFO L168 Benchmark]: Boogie Procedure Inliner took 48.78 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2019-01-07 15:21:15,989 INFO L168 Benchmark]: Boogie Preprocessor took 30.28 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. [2019-01-07 15:21:15,989 INFO L168 Benchmark]: RCFGBuilder took 525.53 ms. Allocated memory is still 1.5 GB. Free memory was 1.5 GB in the beginning and 1.4 GB in the end (delta: 21.1 MB). Peak memory consumption was 21.1 MB. Max. memory is 7.1 GB. [2019-01-07 15:21:15,990 INFO L168 Benchmark]: Abstract Interpretation took 19791.42 ms. Allocated memory was 1.5 GB in the beginning and 1.6 GB in the end (delta: 15.7 MB). Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 61.7 MB). Peak memory consumption was 77.4 MB. Max. memory is 7.1 GB. [2019-01-07 15:21:15,994 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - GenericResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * Boogie PL CUP Parser took 0.20 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * Boogie Procedure Inliner took 48.78 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * Boogie Preprocessor took 30.28 ms. Allocated memory is still 1.5 GB. Free memory is still 1.5 GB. There was no memory consumed. Max. memory is 7.1 GB. * RCFGBuilder took 525.53 ms. Allocated memory is still 1.5 GB. Free memory was 1.5 GB in the beginning and 1.4 GB in the end (delta: 21.1 MB). Peak memory consumption was 21.1 MB. Max. memory is 7.1 GB. * Abstract Interpretation took 19791.42 ms. Allocated memory was 1.5 GB in the beginning and 1.6 GB in the end (delta: 15.7 MB). Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 61.7 MB). Peak memory consumption was 77.4 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2: - ExceptionOrErrorResult: AssertionError: inappropriate decl info de.uni_freiburg.informatik.ultimate.plugins.analysis.abstractinterpretationv2: AssertionError: inappropriate decl info: de.uni_freiburg.informatik.ultimate.modelcheckerutils.boogie.Boogie2SmtSymbolTable.getBoogieVar(Boogie2SmtSymbolTable.java:240) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...