// verifast_options{disable_overflow_check target:ILP32}


extern void abort(void);
//@ requires true;
//@ ensures true;
void reach_error()
//@ requires false;
//@ ensures true;
{}void __VERIFIER_assert(int cond) 
//@ requires (cond != 0);
//@ ensures (cond != 0);
{ if(!(cond)) { ERROR: {reach_error();abort();} } }int main() 
//@ requires module(hh2012_ex3__verifast_instrumented, true);
//@ ensures junk();
{
    //@ open_module(); 
  int i = 0;
while (i < 4)
//@ invariant ((i <= 4) && (0 <= i));
    {
    int j = 0;
while (j < 4)
//@ invariant ((((j == 0) && (0 <= i)) && (i <= 3)) || ((((i <= (j + 3)) && (1 <= j)) && (j <= i)) && (j <= 4)));
    {
      i++;
      j++;
      __VERIFIER_assert(0 <= j);
      __VERIFIER_assert(j <= i);
      __VERIFIER_assert(i <= j + 3);
      __VERIFIER_assert(j <= 4);
    }
    __VERIFIER_assert(0 <= j);
    __VERIFIER_assert(j <= i);
    __VERIFIER_assert(i <= j + 3);
    __VERIFIER_assert(j <= 4);
    i = i - j + 1;
  }
  return 0;
}