java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/Sifa.xml -i ../../../trunk/examples/programs/20181010-MemSafetyPathprograms/ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl -------------------------------------------------------------------------------- This is Ultimate 0.1.24-b03553c [2019-08-05 18:14:04,806 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-08-05 18:14:04,809 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-08-05 18:14:04,826 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-08-05 18:14:04,826 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-08-05 18:14:04,827 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-08-05 18:14:04,831 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-08-05 18:14:04,834 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-08-05 18:14:04,836 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-08-05 18:14:04,838 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-08-05 18:14:04,839 INFO L181 SettingsManager]: Resetting Symbolic Interpretation preferences to default values [2019-08-05 18:14:04,841 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-08-05 18:14:04,841 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-08-05 18:14:04,842 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-08-05 18:14:04,851 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-08-05 18:14:04,852 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-08-05 18:14:04,853 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-08-05 18:14:04,854 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-08-05 18:14:04,858 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-08-05 18:14:04,863 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-08-05 18:14:04,864 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-08-05 18:14:04,867 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-08-05 18:14:04,870 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-08-05 18:14:04,871 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-08-05 18:14:04,874 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-08-05 18:14:04,874 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-08-05 18:14:04,875 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-08-05 18:14:04,876 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-08-05 18:14:04,877 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-08-05 18:14:04,880 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-08-05 18:14:04,880 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-08-05 18:14:04,881 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-08-05 18:14:04,882 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-08-05 18:14:04,884 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-08-05 18:14:04,885 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-08-05 18:14:04,886 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-08-05 18:14:04,886 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-08-05 18:14:04,887 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-08-05 18:14:04,887 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-08-05 18:14:04,889 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-08-05 18:14:04,891 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-08-05 18:14:04,938 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-08-05 18:14:04,954 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-08-05 18:14:04,958 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-08-05 18:14:04,960 INFO L271 PluginConnector]: Initializing Boogie PL CUP Parser... [2019-08-05 18:14:04,960 INFO L275 PluginConnector]: Boogie PL CUP Parser initialized [2019-08-05 18:14:04,962 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/programs/20181010-MemSafetyPathprograms/ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl [2019-08-05 18:14:04,963 INFO L110 BoogieParser]: Parsing: '/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/programs/20181010-MemSafetyPathprograms/ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl' [2019-08-05 18:14:05,029 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-08-05 18:14:05,031 INFO L131 ToolchainWalker]: Walking toolchain with 3 elements. [2019-08-05 18:14:05,032 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-08-05 18:14:05,032 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-08-05 18:14:05,032 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-08-05 18:14:05,058 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,060 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,072 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,073 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,078 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,083 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,085 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,087 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-08-05 18:14:05,088 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-08-05 18:14:05,088 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-08-05 18:14:05,088 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-08-05 18:14:05,089 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.boogie.parser AST 05.08 06:14:05" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-08-05 18:14:05,155 INFO L124 BoogieDeclarations]: Specification and implementation of procedure ULTIMATE.start given in one single declaration [2019-08-05 18:14:05,156 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-08-05 18:14:05,156 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-08-05 18:14:05,477 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-08-05 18:14:05,477 INFO L283 CfgBuilder]: Removed 0 assume(true) statements. [2019-08-05 18:14:05,479 INFO L202 PluginConnector]: Adding new model ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.08 06:14:05 BoogieIcfgContainer [2019-08-05 18:14:05,479 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-08-05 18:14:05,481 INFO L113 PluginConnector]: ------------------------Symbolic Interpretation---------------------------- [2019-08-05 18:14:05,482 INFO L271 PluginConnector]: Initializing Symbolic Interpretation... [2019-08-05 18:14:05,482 INFO L275 PluginConnector]: Symbolic Interpretation initialized [2019-08-05 18:14:05,483 INFO L185 PluginConnector]: Executing the observer SymbolicInterpretationObserver from plugin Symbolic Interpretation for "ArraysOfVariableLength5_true-valid-memsafety.c_8.bpl de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.08 06:14:05" (1/1) ... [2019-08-05 18:14:05,497 INFO L148 IcfgInterpreter]: Started Sifa with 1 locations of interest [2019-08-05 18:14:05,501 INFO L155 IcfgInterpreter]: Building call graph [2019-08-05 18:14:05,511 INFO L160 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2019-08-05 18:14:05,520 INFO L165 IcfgInterpreter]: Starting interpretation [2019-08-05 18:14:05,521 INFO L185 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 [2019-08-05 18:14:05,637 INFO L169 IcfgInterpreter]: Interpretation finished [2019-08-05 18:14:05,637 INFO L177 IcfgInterpreter]: Final predicates for locations of interest are: [2019-08-05 18:14:05,642 INFO L179 IcfgInterpreter]: Location ULTIMATE.startErr0ASSERT_VIOLATIONASSERT has predicate 18#(and (<= |ULTIMATE.start_write~int_#value| 2147483647) (not (= 1 (select |#valid| |ULTIMATE.start_read~int_#ptr.base|))) (= |ULTIMATE.start_read~int_#ptr.offset| (+ ULTIMATE.start_foo_~i~0 ULTIMATE.start_foo_~b.offset)) (<= ULTIMATE.start_main_~i~1 (+ |ULTIMATE.start_write~int_#value| 1)) (<= 0 ULTIMATE.start_foo_~i~0) (= 0 ULTIMATE.start_foo_~i~0) (= (select |#valid| |ULTIMATE.start_write~int_#ptr.base|) 1) (< ULTIMATE.start_foo_~i~0 ULTIMATE.start_foo_~size) (= ULTIMATE.start_main_~c~0.offset |ULTIMATE.start_main_~#mask~0.offset|) (= ULTIMATE.start_main_~i~1 |ULTIMATE.start_foo_#in~size|) (= |ULTIMATE.start_foo_#in~size| ULTIMATE.start_foo_~size) (= |ULTIMATE.start_write~int_#ptr.base| |ULTIMATE.start_main_~#b~0.base|) (= |ULTIMATE.start_read~int_#sizeOfReadType| 1) (<= 0 |ULTIMATE.start_write~int_#ptr.offset|) (= |ULTIMATE.start_write~int_#sizeOfWrittenType| 4) (= (+ |ULTIMATE.start_main_~#b~0.offset| (* 4 ULTIMATE.start_main_~i~1)) (+ |ULTIMATE.start_write~int_#ptr.offset| 4)) (= |ULTIMATE.start_foo_#in~b.base| ULTIMATE.start_foo_~b.base) (<= 0 (+ |ULTIMATE.start_write~int_#value| 2147483648)) (< ULTIMATE.start_main_~i~1 33) (= |ULTIMATE.start_foo_#in~b.offset| ULTIMATE.start_foo_~b.offset) (= ULTIMATE.start_foo_~b.base |ULTIMATE.start_read~int_#ptr.base|) (< ULTIMATE.start_foo_~i~0 32) (= (store |ULTIMATE.start_write~int_old_#memory_int| |ULTIMATE.start_write~int_#ptr.base| (store (select |ULTIMATE.start_write~int_old_#memory_int| |ULTIMATE.start_write~int_#ptr.base|) |ULTIMATE.start_write~int_#ptr.offset| |ULTIMATE.start_write~int_#value|)) |#memory_int|) (< ULTIMATE.start_main_~i~1 32) (= |ULTIMATE.start_main_~#mask~0.base| ULTIMATE.start_main_~c~0.base) (<= (+ |ULTIMATE.start_write~int_#sizeOfWrittenType| |ULTIMATE.start_write~int_#ptr.offset|) (select |#length| |ULTIMATE.start_write~int_#ptr.base|)) (= |ULTIMATE.start_foo_#in~b.offset| ULTIMATE.start_main_~c~0.offset) (= |ULTIMATE.start_write~int_#value| 0) (or (and (= 0 |ULTIMATE.start_#Ultimate.alloc_#res.offset|) (= 0 |#NULL.base|) (= 0 (+ ULTIMATE.start_main_~i~1 (- 1))) (= |#valid| (store |ULTIMATE.start_#Ultimate.alloc_old_#valid| |ULTIMATE.start_#Ultimate.alloc_#res.base| 1)) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| |ULTIMATE.start_main_~#mask~0.offset|) (= |ULTIMATE.start_main_~#mask~0.base| |ULTIMATE.start_#Ultimate.alloc_#res.base|) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (= 0 (select |ULTIMATE.start_#Ultimate.alloc_old_#valid| |ULTIMATE.start_#Ultimate.alloc_#res.base|)) (not (= 0 |ULTIMATE.start_main_~#b~0.base|)) (exists ((|v_#valid_7| (Array Int Int))) (and (= |ULTIMATE.start_main_old_#valid| (store |v_#valid_7| 0 0)) (= |ULTIMATE.start_#Ultimate.alloc_old_#valid| (store (store |v_#valid_7| 0 0) |ULTIMATE.start_main_~#b~0.base| 1)) (= 0 (select (store |v_#valid_7| 0 0) |ULTIMATE.start_main_~#b~0.base|)))) (= (store |ULTIMATE.start_#Ultimate.alloc_old_#length| |ULTIMATE.start_#Ultimate.alloc_#res.base| |ULTIMATE.start_#Ultimate.alloc_~size|) |#length|) (= |ULTIMATE.start_main_~#b~0.offset| 0) (exists ((|v_#length_5| (Array Int Int))) (= |ULTIMATE.start_#Ultimate.alloc_old_#length| (store |v_#length_5| |ULTIMATE.start_main_~#b~0.base| 128))) (= 32 |ULTIMATE.start_#Ultimate.alloc_~size|) (= |#NULL.offset| 0)) (and (= 0 |ULTIMATE.start_#Ultimate.alloc_#res.offset|) (= 0 |#NULL.base|) (= |#valid| (store |ULTIMATE.start_#Ultimate.alloc_old_#valid| |ULTIMATE.start_#Ultimate.alloc_#res.base| 1)) (<= (+ |ULTIMATE.start_main_~#b~0.offset| 4) (select |#length| |ULTIMATE.start_main_~#b~0.base|)) (exists ((|v_ULTIMATE.start_write~int_old_#memory_int_2| (Array Int (Array Int Int)))) (= |ULTIMATE.start_write~int_old_#memory_int| (store |v_ULTIMATE.start_write~int_old_#memory_int_2| |ULTIMATE.start_main_~#b~0.base| (store (select |v_ULTIMATE.start_write~int_old_#memory_int_2| |ULTIMATE.start_main_~#b~0.base|) |ULTIMATE.start_main_~#b~0.offset| 0)))) (<= 0 |ULTIMATE.start_main_~#b~0.offset|) (= 1 (select |#valid| |ULTIMATE.start_main_~#b~0.base|)) (= |ULTIMATE.start_main_~#mask~0.base| |ULTIMATE.start_#Ultimate.alloc_#res.base|) (= |ULTIMATE.start_#Ultimate.alloc_#res.offset| |ULTIMATE.start_main_~#mask~0.offset|) (not (= |ULTIMATE.start_#Ultimate.alloc_#res.base| 0)) (exists ((|v_#valid_7| (Array Int Int))) (and (= |ULTIMATE.start_main_old_#valid| (store |v_#valid_7| 0 0)) (= |ULTIMATE.start_#Ultimate.alloc_old_#valid| (store (store |v_#valid_7| 0 0) |ULTIMATE.start_main_~#b~0.base| 1)) (= 0 (select (store |v_#valid_7| 0 0) |ULTIMATE.start_main_~#b~0.base|)))) (= 0 (select |ULTIMATE.start_#Ultimate.alloc_old_#valid| |ULTIMATE.start_#Ultimate.alloc_#res.base|)) (not (= 0 |ULTIMATE.start_main_~#b~0.base|)) (= (store |ULTIMATE.start_#Ultimate.alloc_old_#length| |ULTIMATE.start_#Ultimate.alloc_#res.base| |ULTIMATE.start_#Ultimate.alloc_~size|) |#length|) (= |ULTIMATE.start_main_~#b~0.offset| 0) (exists ((|v_#length_5| (Array Int Int))) (= |ULTIMATE.start_#Ultimate.alloc_old_#length| (store |v_#length_5| |ULTIMATE.start_main_~#b~0.base| 128))) (= 32 |ULTIMATE.start_#Ultimate.alloc_~size|) (= |#NULL.offset| 0) (= 1 (+ ULTIMATE.start_main_~i~1 (- 1))))) (= |ULTIMATE.start_foo_#in~b.base| ULTIMATE.start_main_~c~0.base)) [2019-08-05 18:14:05,644 WARN L88 terpretationObserver]: Some locations of interest might be reachable, see reported results. [2019-08-05 18:14:05,651 INFO L132 PluginConnector]: ------------------------ END Symbolic Interpretation---------------------------- [2019-08-05 18:14:05,654 INFO L168 Benchmark]: Toolchain (without parser) took 622.11 ms. Allocated memory is still 129.5 MB. Free memory was 105.5 MB in the beginning and 83.2 MB in the end (delta: 22.3 MB). Peak memory consumption was 22.3 MB. Max. memory is 7.1 GB. [2019-08-05 18:14:05,655 INFO L168 Benchmark]: Boogie PL CUP Parser took 0.26 ms. Allocated memory is still 129.5 MB. Free memory is still 106.7 MB. There was no memory consumed. Max. memory is 7.1 GB. [2019-08-05 18:14:05,656 INFO L168 Benchmark]: Boogie Preprocessor took 55.67 ms. Allocated memory is still 129.5 MB. Free memory was 105.5 MB in the beginning and 103.2 MB in the end (delta: 2.2 MB). Peak memory consumption was 2.2 MB. Max. memory is 7.1 GB. [2019-08-05 18:14:05,660 INFO L168 Benchmark]: RCFGBuilder took 392.99 ms. Allocated memory is still 129.5 MB. Free memory was 103.2 MB in the beginning and 90.8 MB in the end (delta: 12.5 MB). Peak memory consumption was 12.5 MB. Max. memory is 7.1 GB. [2019-08-05 18:14:05,662 INFO L168 Benchmark]: Symbolic Interpretation took 169.96 ms. Allocated memory is still 129.5 MB. Free memory was 90.8 MB in the beginning and 83.2 MB in the end (delta: 7.6 MB). Peak memory consumption was 7.6 MB. Max. memory is 7.1 GB. [2019-08-05 18:14:05,667 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.symbolicinterpretation: - UnprovableResult [Line: 123]: Unable to prove that assertion always holds Unable to prove that assertion always holds Reason: Interpreter reached this location of interest. Location might be reachable.. Possible FailurePath: * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * Boogie PL CUP Parser took 0.26 ms. Allocated memory is still 129.5 MB. Free memory is still 106.7 MB. There was no memory consumed. Max. memory is 7.1 GB. * Boogie Preprocessor took 55.67 ms. Allocated memory is still 129.5 MB. Free memory was 105.5 MB in the beginning and 103.2 MB in the end (delta: 2.2 MB). Peak memory consumption was 2.2 MB. Max. memory is 7.1 GB. * RCFGBuilder took 392.99 ms. Allocated memory is still 129.5 MB. Free memory was 103.2 MB in the beginning and 90.8 MB in the end (delta: 12.5 MB). Peak memory consumption was 12.5 MB. Max. memory is 7.1 GB. * Symbolic Interpretation took 169.96 ms. Allocated memory is still 129.5 MB. Free memory was 90.8 MB in the beginning and 83.2 MB in the end (delta: 7.6 MB). Peak memory consumption was 7.6 MB. Max. memory is 7.1 GB. RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request...