env EmpireAutomatonOG.Timeout=-1 benchexec/../run-test.sh Library-ProofsTest 'de.uni_freiburg.informatik.ultimate.lib.proofs.owickigries.OGProofProducerTest$EmpireAutomatonOG' ReachSafety.13-privatized_52-refine-protected-loop2-small_true.ats true -------------------------------------------------------------------------------- Thanks for using JUnit! Support its development at https://junit.org/sponsoring Test plan execution started. Number of static tests: 1 ╷ ├─ JUnit Jupiter └─ JUnit Jupiter finished after 5 ms. ├─ JUnit Vintage │ ├─ EmpireAutomatonOG │ │ ├─ ReachSafety_13-privatized_52-refine-protected-loop2-small_true_ats │ │ │ tags: [] │ │ │ uniqueId: [engine:junit-vintage]/[runner:de.uni_freiburg.informatik.ultimate.lib.proofs.owickigries.OGProofProducerTest$EmpireAutomatonOG]/[test:ReachSafety_13-privatized_52-refine-protected-loop2-small_true_ats(de.uni_freiburg.informatik.ultimate.lib.proofs.owickigries.OGProofProducerTest$EmpireAutomatonOG)] │ │ │ parent: [engine:junit-vintage]/[runner:de.uni_freiburg.informatik.ultimate.lib.proofs.owickigries.OGProofProducerTest$EmpireAutomatonOG] │ │ │ source: ClassSource [className = 'de.uni_freiburg.informatik.ultimate.lib.proofs.owickigries.OGProofProducerTest$EmpireAutomatonOG', filePosition = null] [WARN]: Using environment timeout: -1ms [INFO]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/adds/z3 [INFO]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/adds/z3 SMTLIB2_COMPLIANT=true -t:1000 -memory:2024 -smt2 -in (exit command is (exit), workingDir is null) [INFO]: [MP /storage/repos/ultimate/releaseScripts/default/adds/z3 SMTLIB2_COMPLIANT=true -t:1000 -memory:2024 -smt2 -in (1)] Waiting until timeout for monitored process [INFO]: Initialized classic predicate unifier [INFO]: Start isDeterministic. Operand 5 states and 250 transitions. [INFO]: Finished isDeterministic. Operand is deterministic. [INFO]: Starting Floyd-Hoare check of an automaton with has 5 states, 5 states have (on average 50.0) internal successors, (250), 5 states have internal predecessors, (250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [INFO]: Floyd-Hoare annotation has 250 edges. 250 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [INFO]: Number of proof automata: 1 [INFO]: 45 / 66 letters are loopers in proof 0 [INFO]: Loopers in proof automata: min=45, max=45, median=45 [INFO]: Start finitePrefix. Operand will be constructed on-demand [INFO]: 2/67 cut-off events. [INFO]: For 1/1 co-relation queries the response was YES. [INFO]: Finished finitePrefix Result has 94 conditions, 67 events. 2/67 cut-off events. For 1/1 co-relation queries the response was YES. Maximal size of possible extension queue 2. Compared 33 event pairs, 0 based on Foata normal form. 0/66 useless extension candidates. Maximal degree in co-relation 57. Up to 10 conditions per place. [INFO]: OwickiGriesTestSuite setup time: 989ms [INFO]: Constructing Owicki-Gries proof for Petri program that has 67 places, 66 transitions, 136 flow. [INFO]: Interfering actions: min=0, max=29, median=0 [INFO]: Computed Owicki-Gries annotation with 1 ghost variables, 7 ghost updates, and overall size 2280 Assertions: l50 : 3#(= v_g_1 2) l52 : 8#(or (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l51 : 11#(= v_g_1 2) l10 : 14#(= v_g_1 2) l54 : 15#false l53 : 18#(= v_g_1 2) l12 : 25#(or (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l56 : 28#(= v_g_1 2) l11 : 31#(= v_g_1 2) l55 : 34#(= v_g_1 2) l14 : 49#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l58 : 52#(and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) l13 : 55#(and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) l57 : 60#(or (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l16 : 63#(= v_g_1 2) l15 : 66#(= v_g_1 2) l59 : 69#(and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) l18 : 72#(= v_g_1 2) l17 : 73#false l19 : 78#(or (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l61 : 81#(= v_g_1 2) l60 : 96#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l63 : 101#(or (and (= v_g_1 7) (not (= ~g~0 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l62 : 102#false l21 : 105#(= v_g_1 2) l65 : 108#(= v_g_1 2) l20 : 111#(= v_g_1 8) l64 : 116#(or (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l23 : 119#(and (= v_g_1 7) (not (= ~g~0 0))) l22 : 120#false l66 : 123#(= v_g_1 2) l25 : 128#(or (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l24 : 131#(= v_g_1 2) l27 : 134#(= v_g_1 2) l26 : 137#(= v_g_1 2) l29 : 144#(or (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l28 : 147#(= v_g_1 2) l0 : 150#(= v_g_1 2) l1 : 153#(= v_g_1 2) l2 : 158#(or (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l3 : 161#(= v_g_1 2) l4 : 164#(= v_g_1 2) l30 : 171#(or (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8)) l5 : 174#(and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) l6 : 189#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l32 : 192#(= v_g_1 2) l7 : 195#(= v_g_1 2) l31 : 198#(= v_g_1 2) l8 : 199#false l34 : 214#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l9 : 217#(and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) l33 : 220#(= v_g_1 2) l36 : 221#false l35 : 224#(= v_g_1 2) l38 : 227#(= v_g_1 2) l37 : 230#(= v_g_1 2) l39 : 233#(= v_g_1 2) l41 : 248#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l40 : 263#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l43 : 278#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l42 : 281#(= v_g_1 2) l45 : 284#(and (= v_g_1 7) (not (= ~g~0 0))) l44 : 285#false l47 : 288#(and (= v_g_1 7) (not (= ~g~0 0))) l46 : 303#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) l49 : 306#(= v_g_1 3) l48 : 321#(or (and (not (= ~g~0 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_~cond#1| 0)) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0)) (= v_g_1 1)) (and (not (= ~g~0 0)) (= v_g_1 4) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (= v_g_1 3) (and (= v_g_1 7) (not (= ~g~0 0))) (= v_g_1 8) (and (not (= ~g~0 0)) (= v_g_1 5) (not (= |workerThread1of1ForFork0___VERIFIER_assert_#in~cond#1| 0))) (and (not (= ~g~0 0)) (= v_g_1 6))) Ghost Variables (and initial values): v_g_1 : 2 Ghost Updates: [39][2] : (v_g_1) := ((ite (= v_g_1 4) 7 v_g_1)) [30][34] : (v_g_1) := ((ite (= v_g_1 6) 5 (ite (= v_g_1 7) 5 v_g_1))) [29][26] : (v_g_1) := ((ite (= v_g_1 8) 6 (ite (= v_g_1 3) 6 (ite (= v_g_1 7) 7 v_g_1)))) [32][12] : (v_g_1) := ((ite (= v_g_1 5) 1 v_g_1)) [44][44] : (v_g_1) := ((ite (= v_g_1 7) 8 v_g_1)) [37][46] : (v_g_1) := ((ite (= v_g_1 1) 4 v_g_1)) [52][15] : (v_g_1) := ((ite (= v_g_1 2) 3 v_g_1)) [INFO]: EmpireComputation time [ms]: 1, EmpireComputation statistics: automaton size: 8, number of unique pairs: 8, empire law size: 100, empire annotation size: 108, number of regions: 11, number of territories: 8, Min number of regions per territory: 2, Max number of regions per territory: 3, Median number of regions per territory: 3, Min number of places per region: 1, Max number of places per region: 30, Median number of places per region: 2, Empire validity check time [ms]: 152, EmpireToOwickiGries time [ms]: 133, Owicki-Gries validity check time [ms]: 456 │ │ │ duration: 1777 ms │ │ │ status: ✔ SUCCESSFUL │ └─ EmpireAutomatonOG finished after 1781 ms. └─ JUnit Vintage finished after 1788 ms. ├─ JUnit Platform Suite └─ JUnit Platform Suite finished after 1 ms. Test plan execution finished. Number of all tests: 1  Test run finished after 1825 ms [ 4 containers found ] [ 0 containers skipped ] [ 4 containers started ] [ 0 containers aborted ] [ 4 containers successful ] [ 0 containers failed ] [ 1 tests found ] [ 0 tests skipped ] [ 1 tests started ] [ 0 tests aborted ] [ 1 tests successful ] [ 0 tests failed ]