./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i -s /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f18f7f1f917468e24f0e5d26966f1156107884dd ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 15:14:26,829 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 15:14:26,830 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 15:14:26,836 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 15:14:26,837 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 15:14:26,837 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 15:14:26,838 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 15:14:26,839 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 15:14:26,840 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 15:14:26,841 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 15:14:26,842 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 15:14:26,842 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 15:14:26,842 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 15:14:26,843 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 15:14:26,844 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 15:14:26,844 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 15:14:26,844 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 15:14:26,846 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 15:14:26,847 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 15:14:26,847 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 15:14:26,848 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 15:14:26,849 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 15:14:26,851 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 15:14:26,851 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 15:14:26,851 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 15:14:26,852 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 15:14:26,852 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 15:14:26,852 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 15:14:26,853 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 15:14:26,854 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 15:14:26,854 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 15:14:26,854 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 15:14:26,855 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 15:14:26,855 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 15:14:26,855 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 15:14:26,856 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 15:14:26,856 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 15:14:26,867 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 15:14:26,867 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 15:14:26,868 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 15:14:26,868 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 15:14:26,868 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 15:14:26,868 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 15:14:26,868 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 15:14:26,869 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 15:14:26,869 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 15:14:26,869 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 15:14:26,869 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 15:14:26,869 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 15:14:26,869 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 15:14:26,869 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 15:14:26,870 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 15:14:26,870 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 15:14:26,871 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 15:14:26,871 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 15:14:26,871 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 15:14:26,871 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 15:14:26,871 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 15:14:26,871 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 15:14:26,871 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 15:14:26,872 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 15:14:26,872 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f18f7f1f917468e24f0e5d26966f1156107884dd [2018-11-23 15:14:26,895 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 15:14:26,904 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 15:14:26,907 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 15:14:26,908 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 15:14:26,908 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 15:14:26,909 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/../../sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 15:14:26,955 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/data/b9eac4ad6/f04bc8e3ef1d416b88e78d25a3d9ec8a/FLAG74ab00b6b [2018-11-23 15:14:27,336 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 15:14:27,337 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/sv-benchmarks/c/ldv-regression/rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 15:14:27,345 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/data/b9eac4ad6/f04bc8e3ef1d416b88e78d25a3d9ec8a/FLAG74ab00b6b [2018-11-23 15:14:27,719 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/data/b9eac4ad6/f04bc8e3ef1d416b88e78d25a3d9ec8a [2018-11-23 15:14:27,721 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 15:14:27,722 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 15:14:27,722 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 15:14:27,722 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 15:14:27,726 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 15:14:27,726 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:14:27" (1/1) ... [2018-11-23 15:14:27,729 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@75fb1e49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:27, skipping insertion in model container [2018-11-23 15:14:27,729 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:14:27" (1/1) ... [2018-11-23 15:14:27,737 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 15:14:27,764 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 15:14:27,944 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 15:14:27,948 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 15:14:27,976 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 15:14:28,057 INFO L195 MainTranslator]: Completed translation [2018-11-23 15:14:28,057 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28 WrapperNode [2018-11-23 15:14:28,057 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 15:14:28,058 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 15:14:28,058 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 15:14:28,058 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 15:14:28,063 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,074 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,080 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 15:14:28,080 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 15:14:28,080 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 15:14:28,080 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 15:14:28,086 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,086 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,088 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,088 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,093 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,094 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,096 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... [2018-11-23 15:14:28,097 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 15:14:28,098 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 15:14:28,098 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 15:14:28,098 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 15:14:28,099 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 15:14:28,145 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 15:14:28,145 INFO L130 BoogieDeclarations]: Found specification of procedure my_malloc [2018-11-23 15:14:28,146 INFO L138 BoogieDeclarations]: Found implementation of procedure my_malloc [2018-11-23 15:14:28,146 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 15:14:28,146 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 15:14:28,146 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 15:14:28,146 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 15:14:28,146 INFO L130 BoogieDeclarations]: Found specification of procedure list_add [2018-11-23 15:14:28,146 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add [2018-11-23 15:14:28,146 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 15:14:28,146 INFO L130 BoogieDeclarations]: Found specification of procedure __blast_assert [2018-11-23 15:14:28,147 INFO L138 BoogieDeclarations]: Found implementation of procedure __blast_assert [2018-11-23 15:14:28,147 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2018-11-23 15:14:28,147 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2018-11-23 15:14:28,147 INFO L130 BoogieDeclarations]: Found specification of procedure __getMemory [2018-11-23 15:14:28,147 INFO L138 BoogieDeclarations]: Found implementation of procedure __getMemory [2018-11-23 15:14:28,147 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 15:14:28,147 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 15:14:28,370 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 15:14:28,370 INFO L280 CfgBuilder]: Removed 0 assue(true) statements. [2018-11-23 15:14:28,370 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:14:28 BoogieIcfgContainer [2018-11-23 15:14:28,370 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 15:14:28,371 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 15:14:28,371 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 15:14:28,373 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 15:14:28,373 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:14:27" (1/3) ... [2018-11-23 15:14:28,373 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d7c8432 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:14:28, skipping insertion in model container [2018-11-23 15:14:28,373 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:14:28" (2/3) ... [2018-11-23 15:14:28,374 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2d7c8432 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:14:28, skipping insertion in model container [2018-11-23 15:14:28,374 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:14:28" (3/3) ... [2018-11-23 15:14:28,375 INFO L112 eAbstractionObserver]: Analyzing ICFG rule60_list2_true-termination.c_false-unreach-call_1.i [2018-11-23 15:14:28,381 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 15:14:28,386 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 15:14:28,398 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 15:14:28,419 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 15:14:28,420 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 15:14:28,420 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 15:14:28,420 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 15:14:28,420 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 15:14:28,420 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 15:14:28,421 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 15:14:28,421 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 15:14:28,421 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 15:14:28,436 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states. [2018-11-23 15:14:28,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2018-11-23 15:14:28,440 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:28,441 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:28,443 INFO L423 AbstractCegarLoop]: === Iteration 1 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:28,447 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:28,447 INFO L82 PathProgramCache]: Analyzing trace with hash -695557442, now seen corresponding path program 1 times [2018-11-23 15:14:28,448 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:28,449 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:28,484 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:28,485 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:28,485 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:28,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:28,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:14:28,604 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:14:28,604 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-23 15:14:28,606 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2018-11-23 15:14:28,614 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-23 15:14:28,615 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-23 15:14:28,616 INFO L87 Difference]: Start difference. First operand 48 states. Second operand 6 states. [2018-11-23 15:14:28,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:28,696 INFO L93 Difference]: Finished difference Result 86 states and 112 transitions. [2018-11-23 15:14:28,696 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 15:14:28,698 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 13 [2018-11-23 15:14:28,698 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:28,703 INFO L225 Difference]: With dead ends: 86 [2018-11-23 15:14:28,703 INFO L226 Difference]: Without dead ends: 40 [2018-11-23 15:14:28,706 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2018-11-23 15:14:28,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2018-11-23 15:14:28,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 40. [2018-11-23 15:14:28,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 40 states. [2018-11-23 15:14:28,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 46 transitions. [2018-11-23 15:14:28,734 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 46 transitions. Word has length 13 [2018-11-23 15:14:28,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:28,734 INFO L480 AbstractCegarLoop]: Abstraction has 40 states and 46 transitions. [2018-11-23 15:14:28,735 INFO L481 AbstractCegarLoop]: Interpolant automaton has 6 states. [2018-11-23 15:14:28,735 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 46 transitions. [2018-11-23 15:14:28,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 15:14:28,736 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:28,737 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:28,737 INFO L423 AbstractCegarLoop]: === Iteration 2 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:28,737 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:28,737 INFO L82 PathProgramCache]: Analyzing trace with hash -314025953, now seen corresponding path program 1 times [2018-11-23 15:14:28,737 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:28,738 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:28,739 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:28,739 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:28,740 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:28,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:28,848 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 15:14:28,848 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 15:14:28,849 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-23 15:14:28,850 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2018-11-23 15:14:28,850 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-23 15:14:28,850 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 15:14:28,850 INFO L87 Difference]: Start difference. First operand 40 states and 46 transitions. Second operand 7 states. [2018-11-23 15:14:28,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:28,874 INFO L93 Difference]: Finished difference Result 65 states and 76 transitions. [2018-11-23 15:14:28,874 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-23 15:14:28,874 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 38 [2018-11-23 15:14:28,875 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:28,877 INFO L225 Difference]: With dead ends: 65 [2018-11-23 15:14:28,877 INFO L226 Difference]: Without dead ends: 45 [2018-11-23 15:14:28,878 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-23 15:14:28,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2018-11-23 15:14:28,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2018-11-23 15:14:28,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 45 states. [2018-11-23 15:14:28,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 51 transitions. [2018-11-23 15:14:28,885 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 51 transitions. Word has length 38 [2018-11-23 15:14:28,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:28,886 INFO L480 AbstractCegarLoop]: Abstraction has 45 states and 51 transitions. [2018-11-23 15:14:28,886 INFO L481 AbstractCegarLoop]: Interpolant automaton has 7 states. [2018-11-23 15:14:28,886 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 51 transitions. [2018-11-23 15:14:28,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2018-11-23 15:14:28,887 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:28,887 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:28,887 INFO L423 AbstractCegarLoop]: === Iteration 3 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:28,887 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:28,887 INFO L82 PathProgramCache]: Analyzing trace with hash -607428960, now seen corresponding path program 1 times [2018-11-23 15:14:28,887 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:28,887 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:28,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:28,889 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:28,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:28,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:28,981 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 15:14:28,981 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 15:14:28,981 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 15:14:28,993 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:29,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:29,044 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:14:29,319 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 15:14:29,341 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2018-11-23 15:14:29,342 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [13] imperfect sequences [7] total 18 [2018-11-23 15:14:29,342 INFO L459 AbstractCegarLoop]: Interpolant automaton has 18 states [2018-11-23 15:14:29,342 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2018-11-23 15:14:29,343 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2018-11-23 15:14:29,343 INFO L87 Difference]: Start difference. First operand 45 states and 51 transitions. Second operand 18 states. [2018-11-23 15:14:29,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:29,890 INFO L93 Difference]: Finished difference Result 97 states and 117 transitions. [2018-11-23 15:14:29,890 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2018-11-23 15:14:29,891 INFO L78 Accepts]: Start accepts. Automaton has 18 states. Word has length 38 [2018-11-23 15:14:29,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:29,892 INFO L225 Difference]: With dead ends: 97 [2018-11-23 15:14:29,892 INFO L226 Difference]: Without dead ends: 70 [2018-11-23 15:14:29,893 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=203, Invalid=987, Unknown=0, NotChecked=0, Total=1190 [2018-11-23 15:14:29,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2018-11-23 15:14:29,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 60. [2018-11-23 15:14:29,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60 states. [2018-11-23 15:14:29,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 72 transitions. [2018-11-23 15:14:29,900 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 72 transitions. Word has length 38 [2018-11-23 15:14:29,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:29,900 INFO L480 AbstractCegarLoop]: Abstraction has 60 states and 72 transitions. [2018-11-23 15:14:29,900 INFO L481 AbstractCegarLoop]: Interpolant automaton has 18 states. [2018-11-23 15:14:29,900 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 72 transitions. [2018-11-23 15:14:29,901 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 15:14:29,901 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:29,901 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:29,902 INFO L423 AbstractCegarLoop]: === Iteration 4 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:29,902 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:29,902 INFO L82 PathProgramCache]: Analyzing trace with hash 1122798515, now seen corresponding path program 1 times [2018-11-23 15:14:29,902 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:29,902 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:29,903 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:29,903 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:29,904 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:29,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:30,095 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:14:30,095 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 15:14:30,095 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 15:14:30,112 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:30,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:30,140 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:14:30,262 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:14:30,278 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 15:14:30,278 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19] total 24 [2018-11-23 15:14:30,278 INFO L459 AbstractCegarLoop]: Interpolant automaton has 24 states [2018-11-23 15:14:30,279 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2018-11-23 15:14:30,279 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=494, Unknown=0, NotChecked=0, Total=552 [2018-11-23 15:14:30,279 INFO L87 Difference]: Start difference. First operand 60 states and 72 transitions. Second operand 24 states. [2018-11-23 15:14:30,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:30,718 INFO L93 Difference]: Finished difference Result 73 states and 87 transitions. [2018-11-23 15:14:30,718 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-11-23 15:14:30,718 INFO L78 Accepts]: Start accepts. Automaton has 24 states. Word has length 45 [2018-11-23 15:14:30,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:30,719 INFO L225 Difference]: With dead ends: 73 [2018-11-23 15:14:30,719 INFO L226 Difference]: Without dead ends: 69 [2018-11-23 15:14:30,720 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 41 SyntacticMatches, 1 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 130 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=142, Invalid=1118, Unknown=0, NotChecked=0, Total=1260 [2018-11-23 15:14:30,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2018-11-23 15:14:30,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 68. [2018-11-23 15:14:30,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 68 states. [2018-11-23 15:14:30,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 79 transitions. [2018-11-23 15:14:30,726 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 79 transitions. Word has length 45 [2018-11-23 15:14:30,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:30,727 INFO L480 AbstractCegarLoop]: Abstraction has 68 states and 79 transitions. [2018-11-23 15:14:30,727 INFO L481 AbstractCegarLoop]: Interpolant automaton has 24 states. [2018-11-23 15:14:30,727 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 79 transitions. [2018-11-23 15:14:30,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2018-11-23 15:14:30,727 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:30,728 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:30,728 INFO L423 AbstractCegarLoop]: === Iteration 5 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:30,728 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:30,728 INFO L82 PathProgramCache]: Analyzing trace with hash 313451889, now seen corresponding path program 1 times [2018-11-23 15:14:30,728 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:30,728 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:30,729 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:30,729 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:30,729 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:30,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:30,859 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:14:30,859 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 15:14:30,859 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 15:14:30,865 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:30,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:30,892 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:14:31,103 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 15:14:31,118 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 15:14:31,118 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14] total 26 [2018-11-23 15:14:31,119 INFO L459 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-11-23 15:14:31,119 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-11-23 15:14:31,119 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=85, Invalid=565, Unknown=0, NotChecked=0, Total=650 [2018-11-23 15:14:31,119 INFO L87 Difference]: Start difference. First operand 68 states and 79 transitions. Second operand 26 states. [2018-11-23 15:14:31,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:31,745 INFO L93 Difference]: Finished difference Result 99 states and 113 transitions. [2018-11-23 15:14:31,745 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2018-11-23 15:14:31,746 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 45 [2018-11-23 15:14:31,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:31,746 INFO L225 Difference]: With dead ends: 99 [2018-11-23 15:14:31,746 INFO L226 Difference]: Without dead ends: 77 [2018-11-23 15:14:31,747 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=307, Invalid=1585, Unknown=0, NotChecked=0, Total=1892 [2018-11-23 15:14:31,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2018-11-23 15:14:31,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 59. [2018-11-23 15:14:31,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 59 states. [2018-11-23 15:14:31,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 66 transitions. [2018-11-23 15:14:31,756 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 66 transitions. Word has length 45 [2018-11-23 15:14:31,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:31,756 INFO L480 AbstractCegarLoop]: Abstraction has 59 states and 66 transitions. [2018-11-23 15:14:31,757 INFO L481 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-11-23 15:14:31,757 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 66 transitions. [2018-11-23 15:14:31,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 15:14:31,758 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:31,758 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:31,758 INFO L423 AbstractCegarLoop]: === Iteration 6 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:31,758 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:31,758 INFO L82 PathProgramCache]: Analyzing trace with hash 681136710, now seen corresponding path program 1 times [2018-11-23 15:14:31,758 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:31,758 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:31,760 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:31,760 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:31,760 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:31,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:31,902 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 8 proven. 5 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2018-11-23 15:14:31,903 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 15:14:31,903 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 15:14:31,908 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:31,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:31,934 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:14:32,195 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 15:14:32,211 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 15:14:32,211 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 20] total 34 [2018-11-23 15:14:32,211 INFO L459 AbstractCegarLoop]: Interpolant automaton has 34 states [2018-11-23 15:14:32,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2018-11-23 15:14:32,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=90, Invalid=1032, Unknown=0, NotChecked=0, Total=1122 [2018-11-23 15:14:32,212 INFO L87 Difference]: Start difference. First operand 59 states and 66 transitions. Second operand 34 states. [2018-11-23 15:14:33,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:33,040 INFO L93 Difference]: Finished difference Result 105 states and 119 transitions. [2018-11-23 15:14:33,040 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2018-11-23 15:14:33,040 INFO L78 Accepts]: Start accepts. Automaton has 34 states. Word has length 57 [2018-11-23 15:14:33,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:33,041 INFO L225 Difference]: With dead ends: 105 [2018-11-23 15:14:33,041 INFO L226 Difference]: Without dead ends: 88 [2018-11-23 15:14:33,042 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 52 SyntacticMatches, 1 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 598 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=397, Invalid=3143, Unknown=0, NotChecked=0, Total=3540 [2018-11-23 15:14:33,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2018-11-23 15:14:33,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 72. [2018-11-23 15:14:33,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 72 states. [2018-11-23 15:14:33,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 81 transitions. [2018-11-23 15:14:33,049 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 81 transitions. Word has length 57 [2018-11-23 15:14:33,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:33,050 INFO L480 AbstractCegarLoop]: Abstraction has 72 states and 81 transitions. [2018-11-23 15:14:33,050 INFO L481 AbstractCegarLoop]: Interpolant automaton has 34 states. [2018-11-23 15:14:33,050 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 81 transitions. [2018-11-23 15:14:33,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 15:14:33,050 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:33,050 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:33,051 INFO L423 AbstractCegarLoop]: === Iteration 7 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:33,051 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:33,051 INFO L82 PathProgramCache]: Analyzing trace with hash -128209916, now seen corresponding path program 1 times [2018-11-23 15:14:33,051 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:33,051 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:33,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:33,052 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:33,052 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:33,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:33,199 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 15:14:33,199 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 15:14:33,199 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 15:14:33,205 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:33,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:33,229 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:14:33,372 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2018-11-23 15:14:33,391 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 15:14:33,391 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20] total 26 [2018-11-23 15:14:33,391 INFO L459 AbstractCegarLoop]: Interpolant automaton has 26 states [2018-11-23 15:14:33,391 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2018-11-23 15:14:33,392 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=587, Unknown=0, NotChecked=0, Total=650 [2018-11-23 15:14:33,392 INFO L87 Difference]: Start difference. First operand 72 states and 81 transitions. Second operand 26 states. [2018-11-23 15:14:34,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:34,020 INFO L93 Difference]: Finished difference Result 83 states and 93 transitions. [2018-11-23 15:14:34,021 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2018-11-23 15:14:34,021 INFO L78 Accepts]: Start accepts. Automaton has 26 states. Word has length 57 [2018-11-23 15:14:34,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:34,022 INFO L225 Difference]: With dead ends: 83 [2018-11-23 15:14:34,022 INFO L226 Difference]: Without dead ends: 80 [2018-11-23 15:14:34,023 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 197 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=206, Invalid=1516, Unknown=0, NotChecked=0, Total=1722 [2018-11-23 15:14:34,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2018-11-23 15:14:34,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 79. [2018-11-23 15:14:34,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 79 states. [2018-11-23 15:14:34,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 89 transitions. [2018-11-23 15:14:34,038 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 89 transitions. Word has length 57 [2018-11-23 15:14:34,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:34,038 INFO L480 AbstractCegarLoop]: Abstraction has 79 states and 89 transitions. [2018-11-23 15:14:34,038 INFO L481 AbstractCegarLoop]: Interpolant automaton has 26 states. [2018-11-23 15:14:34,038 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 89 transitions. [2018-11-23 15:14:34,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2018-11-23 15:14:34,039 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:34,039 INFO L402 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:34,040 INFO L423 AbstractCegarLoop]: === Iteration 8 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:34,040 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:34,040 INFO L82 PathProgramCache]: Analyzing trace with hash -715015930, now seen corresponding path program 1 times [2018-11-23 15:14:34,040 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:34,040 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:34,044 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:34,045 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:34,045 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:34,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:34,140 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:14:34,141 INFO L300 seRefinementStrategy]: The current sequences of interpolants are not accepted, trying to find more. [2018-11-23 15:14:34,141 INFO L223 ckRefinementStrategy]: Switched to mode Z3_FP No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true -t:12000 [2018-11-23 15:14:34,155 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:34,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 15:14:34,184 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 15:14:34,252 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 15:14:34,270 INFO L312 seRefinementStrategy]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2018-11-23 15:14:34,270 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 9 [2018-11-23 15:14:34,270 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2018-11-23 15:14:34,271 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2018-11-23 15:14:34,271 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2018-11-23 15:14:34,271 INFO L87 Difference]: Start difference. First operand 79 states and 89 transitions. Second operand 9 states. [2018-11-23 15:14:34,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 15:14:34,421 INFO L93 Difference]: Finished difference Result 91 states and 100 transitions. [2018-11-23 15:14:34,421 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-23 15:14:34,421 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 57 [2018-11-23 15:14:34,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 15:14:34,422 INFO L225 Difference]: With dead ends: 91 [2018-11-23 15:14:34,422 INFO L226 Difference]: Without dead ends: 74 [2018-11-23 15:14:34,423 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 51 SyntacticMatches, 8 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2018-11-23 15:14:34,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2018-11-23 15:14:34,431 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 64. [2018-11-23 15:14:34,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 64 states. [2018-11-23 15:14:34,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 70 transitions. [2018-11-23 15:14:34,432 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 70 transitions. Word has length 57 [2018-11-23 15:14:34,432 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 15:14:34,432 INFO L480 AbstractCegarLoop]: Abstraction has 64 states and 70 transitions. [2018-11-23 15:14:34,432 INFO L481 AbstractCegarLoop]: Interpolant automaton has 9 states. [2018-11-23 15:14:34,434 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 70 transitions. [2018-11-23 15:14:34,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 15:14:34,435 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 15:14:34,435 INFO L402 BasicCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 15:14:34,435 INFO L423 AbstractCegarLoop]: === Iteration 9 === [__blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 15:14:34,435 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 15:14:34,435 INFO L82 PathProgramCache]: Analyzing trace with hash -1890753460, now seen corresponding path program 1 times [2018-11-23 15:14:34,435 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 15:14:34,435 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 15:14:34,436 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:34,436 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 15:14:34,436 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 15:14:34,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 15:14:34,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 15:14:34,475 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=15, |~#head~0.offset|=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [?] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume true; VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET #73#return; VAL [|~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #77#return; VAL [|main_#t~ret32.base|=0, |main_#t~ret32.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #79#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |main_#t~ret33.base|=0, |main_#t~ret33.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #81#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #83#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [|list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #85#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=0, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 != #t~nondet31);havoc #t~nondet31; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #87#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call __blast_assert(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !false; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- [2018-11-23 15:14:34,630 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# [2018-11-23 15:14:34,631 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=9, \old(elem)=13, \old(guard_malloc_counter)=10, \old(guard_malloc_counter)=11, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] ----- [2018-11-23 15:14:34,701 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:14:34 BoogieIcfgContainer [2018-11-23 15:14:34,701 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 15:14:34,702 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 15:14:34,702 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 15:14:34,702 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 15:14:34,702 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:14:28" (3/4) ... [2018-11-23 15:14:34,704 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=15, |~#head~0.offset|=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [?] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0;~elem~0.base, ~elem~0.offset := 0, 0;call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8);call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4);call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume true; VAL [|old(~#head~0.base)|=15, |old(~#head~0.offset)|=12, |old(~elem~0.base)|=13, |old(~elem~0.offset)|=9, |old(~guard_malloc_counter~0.base)|=11, |old(~guard_malloc_counter~0.offset)|=10, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET #73#return; VAL [|~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] havoc ~dev1~0.base, ~dev1~0.offset;havoc ~dev2~0.base, ~dev2~0.offset; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] RET #77#return; VAL [|main_#t~ret32.base|=0, |main_#t~ret32.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset;havoc #t~ret32.base, #t~ret32.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [|my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [|__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] ~size := #in~size; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] assume ~size > 0; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [?] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset;~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset;havoc #t~post28.base, #t~post28.offset;assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#t~nondet29|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 == #t~nondet29);havoc #t~nondet29;#res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [__getMemory_~size=8, |__getMemory_#in~size|=8, |__getMemory_#res.base|=0, |__getMemory_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #69#return; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#t~ret30.base|=0, |my_malloc_#t~ret30.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset;havoc #t~ret30.base, #t~ret30.offset; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [my_malloc_~size=8, |my_malloc_#in~size|=8, |my_malloc_#res.base|=0, |my_malloc_#res.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=1, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #79#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, |main_#t~ret33.base|=0, |main_#t~ret33.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset;havoc #t~ret33.base, #t~ret33.offset; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #81#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |list_add_#t~nondet31|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume 0 != #t~nondet31;havoc #t~nondet31;~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=2, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #83#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [|list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_del_~entry.base=0, list_del_~entry.offset=2, |list_del_#in~entry.base|=0, |list_del_#in~entry.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #85#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |list_add_#t~nondet31|=0, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(0 != #t~nondet31);havoc #t~nondet31; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume true; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=2, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] RET #87#return; VAL [main_~dev1~0.base=0, main_~dev1~0.offset=1, main_~dev2~0.base=0, main_~dev2~0.offset=2, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=0, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [|list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] ~new.base, ~new.offset := #in~new.base, #in~new.offset;~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [list_add_~head.base=14, list_add_~head.offset=0, list_add_~new.base=0, list_add_~new.offset=1, |list_add_#in~head.base|=14, |list_add_#in~head.offset|=0, |list_add_#in~new.base|=0, |list_add_#in~new.offset|=1, |old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call __blast_assert(); VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] assume !false; VAL [|old(~elem~0.base)|=0, |old(~elem~0.offset)|=1, |old(~guard_malloc_counter~0.base)|=0, |old(~guard_malloc_counter~0.offset)|=0, |~#head~0.base|=14, |~#head~0.offset|=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=15, ~#head~0.offset=12, ~elem~0.base=13, ~elem~0.offset=9, ~guard_malloc_counter~0.base=11, ~guard_malloc_counter~0.offset=10] [L867] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := 0, 0; [L887] ~elem~0.base, ~elem~0.offset := 0, 0; [L900] call ~#head~0.base, ~#head~0.offset := #Ultimate.alloc(8); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, ~#head~0.offset, 4); [L900] call write~init~$Pointer$(0, 0, ~#head~0.base, 4 + ~#head~0.offset, 4); VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] ensures true; VAL [old(~#head~0.base)=15, old(~#head~0.offset)=12, old(~elem~0.base)=13, old(~elem~0.offset)=9, old(~guard_malloc_counter~0.base)=11, old(~guard_malloc_counter~0.offset)=10, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L903] havoc ~dev1~0.base, ~dev1~0.offset; [L903] havoc ~dev2~0.base, ~dev2~0.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L904] CALL call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=0, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L904] RET call #t~ret32.base, #t~ret32.offset := my_malloc(8); VAL [#t~ret32.base=0, #t~ret32.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L904] ~dev1~0.base, ~dev1~0.offset := #t~ret32.base, #t~ret32.offset; [L904] havoc #t~ret32.base, #t~ret32.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L905] CALL call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L879] CALL call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L871] assume ~size > 0; VAL [#in~size=8, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=1, ~size=8] [L872] #t~post28.base, #t~post28.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; [L872] ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset := #t~post28.base, 1 + #t~post28.offset; [L872] havoc #t~post28.base, #t~post28.offset; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L873-L874] assume !(0 == #t~nondet29); [L873] havoc #t~nondet29; [L875] #res.base, #res.offset := ~guard_malloc_counter~0.base, ~guard_malloc_counter~0.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L869-L876] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] RET call #t~ret30.base, #t~ret30.offset := __getMemory(~size); VAL [#in~size=8, #t~ret30.base=0, #t~ret30.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L879] #res.base, #res.offset := #t~ret30.base, #t~ret30.offset; [L879] havoc #t~ret30.base, #t~ret30.offset; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L878-L880] ensures true; VAL [#in~size=8, #res.base=0, #res.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=1, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~size=8] [L905] RET call #t~ret33.base, #t~ret33.offset := my_malloc(8); VAL [#t~ret33.base=0, #t~ret33.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L905] ~dev2~0.base, ~dev2~0.offset := #t~ret33.base, #t~ret33.offset; [L905] havoc #t~ret33.base, #t~ret33.offset; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L906-L915] assume (~dev1~0.base != 0 || ~dev1~0.offset != 0) && (~dev2~0.base != 0 || ~dev2~0.offset != 0); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L907] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=0, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L907] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L908] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, #t~nondet31=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L891-L892] assume 0 != #t~nondet31; [L891] havoc #t~nondet31; [L892] ~elem~0.base, ~elem~0.offset := ~new.base, ~new.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=2, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L908] RET call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] CALL call list_del(~dev2~0.base, ~dev2~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ~entry.base, ~entry.offset := #in~entry.base, #in~entry.offset; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L896-L897] assume !(~entry.base == ~elem~0.base && ~entry.offset == ~elem~0.offset); VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L895-L898] ensures true; VAL [#in~entry.base=0, #in~entry.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~entry.base=0, ~entry.offset=2, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L909] RET call list_del(~dev2~0.base, ~dev2~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L910] CALL call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L890] assume ~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, #t~nondet31=0, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L891-L892] assume !(0 != #t~nondet31); [L891] havoc #t~nondet31; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L889-L893] ensures true; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=2, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=2] [L910] RET call list_add(~dev2~0.base, ~dev2~0.offset, ~#head~0.base, ~#head~0.offset); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=0, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~dev1~0.base=0, ~dev1~0.offset=1, ~dev2~0.base=0, ~dev2~0.offset=2, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L913] CALL call list_add(~dev1~0.base, ~dev1~0.offset, ~#head~0.base, ~#head~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L889-L893] ~new.base, ~new.offset := #in~new.base, #in~new.offset; [L889-L893] ~head.base, ~head.offset := #in~head.base, #in~head.offset; VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] assume !(~new.base != ~elem~0.base || ~new.offset != ~elem~0.offset); VAL [#in~head.base=14, #in~head.offset=0, #in~new.base=0, #in~new.offset=1, old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2, ~head.base=14, ~head.offset=0, ~new.base=0, ~new.offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [L6] assert false; VAL [old(~elem~0.base)=0, old(~elem~0.offset)=1, old(~guard_malloc_counter~0.base)=0, old(~guard_malloc_counter~0.offset)=0, ~#head~0.base=14, ~#head~0.offset=0, ~elem~0.base=0, ~elem~0.offset=1, ~guard_malloc_counter~0.base=0, ~guard_malloc_counter~0.offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] ----- [2018-11-23 15:14:35,066 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# [2018-11-23 15:14:35,066 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=15, ~#head~0!offset=12, ~elem~0!base=13, ~elem~0!offset=9, ~guard_malloc_counter~0!base=11, ~guard_malloc_counter~0!offset=10] [L867] ~guard_malloc_counter~0 := { base: 0, offset: 0 }; [L887] ~elem~0 := { base: 0, offset: 0 }; [L900] FCALL call ~#head~0 := #Ultimate.alloc(8); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: ~#head~0!offset }, 4); [L900] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#head~0!base, offset: 4 + ~#head~0!offset }, 4); VAL [old(~#head~0!base)=15, old(~#head~0!offset)=12, old(~elem~0!base)=13, old(~elem~0!offset)=9, old(~guard_malloc_counter~0!base)=11, old(~guard_malloc_counter~0!offset)=10, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] RET call ULTIMATE.init(); VAL [~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [?] CALL call #t~ret34 := main(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L903] havoc ~dev1~0; [L903] havoc ~dev2~0; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L904] CALL call #t~ret32 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=0, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L904] RET call #t~ret32 := my_malloc(8); VAL [#t~ret32!base=0, #t~ret32!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L904] ~dev1~0 := #t~ret32; [L904] havoc #t~ret32; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L905] CALL call #t~ret33 := my_malloc(8); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L878-L880] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L879] CALL call #t~ret30 := __getMemory(~size); VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1] [L869-L876] ~size := #in~size; VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L871] COND TRUE ~size > 0 VAL [#in~size=8, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=1, ~size=8] [L872] #t~post28 := ~guard_malloc_counter~0; [L872] ~guard_malloc_counter~0 := { base: #t~post28!base, offset: 1 + #t~post28!offset }; [L872] havoc #t~post28; [L873] assume -2147483648 <= #t~nondet29 && #t~nondet29 <= 2147483647; VAL [#in~size=8, #t~nondet29=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L873] COND FALSE !(0 == #t~nondet29) [L873] havoc #t~nondet29; [L875] #res := ~guard_malloc_counter~0; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] RET call #t~ret30 := __getMemory(~size); VAL [#in~size=8, #t~ret30!base=0, #t~ret30!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L879] #res := #t~ret30; [L879] havoc #t~ret30; VAL [#in~size=8, #res!base=0, #res!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=1, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~size=8] [L905] RET call #t~ret33 := my_malloc(8); VAL [#t~ret33!base=0, #t~ret33!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L905] ~dev2~0 := #t~ret33; [L905] havoc #t~ret33; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L906] COND TRUE ~dev1~0 != { base: 0, offset: 0 } && ~dev2~0 != { base: 0, offset: 0 } VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L907] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=0, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L907] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L908] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, #t~nondet31=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L891-L892] COND TRUE 0 != #t~nondet31 [L891] havoc #t~nondet31; [L892] ~elem~0 := ~new; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=2, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L908] RET call list_add(~dev1~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] CALL call list_del(~dev2~0); VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L895-L898] ~entry := #in~entry; VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L896] COND FALSE !(~entry == ~elem~0) VAL [#in~entry!base=0, #in~entry!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~entry!base=0, ~entry!offset=2, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L909] RET call list_del(~dev2~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L910] CALL call list_add(~dev2~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L890] COND TRUE ~new != ~elem~0 VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891] assume -2147483648 <= #t~nondet31 && #t~nondet31 <= 2147483647; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, #t~nondet31=0, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L891-L892] COND FALSE !(0 != #t~nondet31) [L891] havoc #t~nondet31; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=2, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=2] [L910] RET call list_add(~dev2~0, ~#head~0); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=0, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~dev1~0!base=0, ~dev1~0!offset=1, ~dev2~0!base=0, ~dev2~0!offset=2, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L913] CALL call list_add(~dev1~0, ~#head~0); VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L889-L893] ~new := #in~new; [L889-L893] ~head := #in~head; VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] COND FALSE !(~new != ~elem~0) VAL [#in~head!base=14, #in~head!offset=0, #in~new!base=0, #in~new!offset=1, old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2, ~head!base=14, ~head!offset=0, ~new!base=0, ~new!offset=1] [L890] CALL call __blast_assert(); VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L6] assert false; VAL [old(~elem~0!base)=0, old(~elem~0!offset)=1, old(~guard_malloc_counter~0!base)=0, old(~guard_malloc_counter~0!offset)=0, ~#head~0!base=14, ~#head~0!offset=0, ~elem~0!base=0, ~elem~0!offset=1, ~guard_malloc_counter~0!base=0, ~guard_malloc_counter~0!offset=2] [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=9, \old(elem)=13, \old(guard_malloc_counter)=10, \old(guard_malloc_counter)=11, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=2, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] ----- [2018-11-23 15:14:35,255 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_040424c5-594a-4cb6-b694-5309773d5c4d/bin-2019/uautomizer/witness.graphml [2018-11-23 15:14:35,255 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 15:14:35,256 INFO L168 Benchmark]: Toolchain (without parser) took 7534.40 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 227.0 MB). Free memory was 956.6 MB in the beginning and 930.5 MB in the end (delta: 26.0 MB). Peak memory consumption was 253.0 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,257 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 15:14:35,258 INFO L168 Benchmark]: CACSL2BoogieTranslator took 335.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.5 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -180.4 MB). Peak memory consumption was 40.4 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,258 INFO L168 Benchmark]: Boogie Procedure Inliner took 21.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,258 INFO L168 Benchmark]: Boogie Preprocessor took 17.70 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,259 INFO L168 Benchmark]: RCFGBuilder took 272.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 21.9 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,259 INFO L168 Benchmark]: TraceAbstraction took 6330.65 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 86.5 MB). Free memory was 1.1 GB in the beginning and 956.9 MB in the end (delta: 150.2 MB). Peak memory consumption was 236.7 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,259 INFO L168 Benchmark]: Witness Printer took 553.25 ms. Allocated memory is still 1.3 GB. Free memory was 956.9 MB in the beginning and 937.1 MB in the end (delta: 19.8 MB). Peak memory consumption was 19.8 MB. Max. memory is 11.5 GB. [2018-11-23 15:14:35,264 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 335.30 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.5 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -180.4 MB). Peak memory consumption was 40.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 21.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 17.70 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 2.7 MB). Peak memory consumption was 2.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 272.67 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 21.9 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. * TraceAbstraction took 6330.65 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 86.5 MB). Free memory was 1.1 GB in the beginning and 956.9 MB in the end (delta: 150.2 MB). Peak memory consumption was 236.7 MB. Max. memory is 11.5 GB. * Witness Printer took 553.25 ms. Allocated memory is still 1.3 GB. Free memory was 956.9 MB in the beginning and 937.1 MB in the end (delta: 19.8 MB). Peak memory consumption was 19.8 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 12 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 15 could not be translated for associated CType STRUCT~~list_head?prev~*list_head?next~*list_head# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 6]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L867] void * guard_malloc_counter = 0; [L887] struct list_head *elem = ((void *)0); [L900] static struct list_head head; VAL [\old(elem)=9, \old(elem)=13, \old(guard_malloc_counter)=10, \old(guard_malloc_counter)=11, \old(head)=null, \old(head)=null, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L903] struct list_head *dev1, *dev2; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L904] CALL, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:0}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, \result={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, \old(size)=8, __getMemory(size)={0:1}, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L879] return __getMemory(size); [L904] RET, EXPR my_malloc(sizeof(*dev1)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, my_malloc(sizeof(*dev1))={0:1}] [L904] dev1 = my_malloc(sizeof(*dev1)) [L905] CALL, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=1, \old(guard_malloc_counter)=0, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L879] CALL, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}] [L871] (size > 0) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, elem={0:0}, guard_malloc_counter={0:1}, head={14:0}, size=8] [L872] guard_malloc_counter++ [L873] COND FALSE !(!__VERIFIER_nondet_int()) [L875] return (void *) guard_malloc_counter; VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, \result={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] RET, EXPR __getMemory(size) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=1, \old(size)=8, __getMemory(size)={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, size=8] [L879] return __getMemory(size); [L905] RET, EXPR my_malloc(sizeof(*dev2)) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, my_malloc(sizeof(*dev2))={0:2}] [L905] dev2 = my_malloc(sizeof(*dev2)) [L906] COND TRUE dev1!=((void *)0) && dev2!=((void *)0) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}] [L907] CALL list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:0}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L907] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L908] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:2}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L891] COND TRUE __VERIFIER_nondet_int() [L892] elem = new VAL [\old(elem)=0, \old(elem)=2, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L908] RET list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L909] CALL list_del(dev2) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L896] COND FALSE !(entry==elem) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, entry={0:2}, entry={0:2}, guard_malloc_counter={0:2}, head={14:0}] [L909] RET list_del(dev2) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L910] CALL list_add(dev2, &head) VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:2}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:2}, new={0:2}] [L891] COND FALSE !(__VERIFIER_nondet_int()) [L910] RET list_add(dev2, &head) VAL [\old(elem)=0, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, dev1={0:1}, dev2={0:2}, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L913] CALL list_add(dev1, &head) VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, new={0:1}] [L890] (new!=elem) ? (0) : __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}, head={14:0}, head={14:0}, new={0:1}, new={0:1}] [L890] CALL __blast_assert () VAL [\old(elem)=0, \old(elem)=1, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] [L6] __VERIFIER_error() VAL [\old(elem)=1, \old(elem)=0, \old(guard_malloc_counter)=0, \old(guard_malloc_counter)=0, elem={0:1}, guard_malloc_counter={0:2}, head={14:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 48 locations, 1 error locations. UNSAFE Result, 6.2s OverallTime, 9 OverallIterations, 4 TraceHistogramMax, 3.3s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 321 SDtfs, 502 SDslu, 1369 SDs, 0 SdLazy, 4891 SolverSat, 569 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 514 GetRequests, 274 SyntacticMatches, 11 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1371 ImplicationChecksByTransitivity, 2.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=79occurred in iteration=7, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 8 MinimizatonAttempts, 56 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 713 NumberOfCodeBlocks, 713 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 635 ConstructedInterpolants, 0 QuantifiedInterpolants, 109006 SizeOfPredicates, 41 NumberOfNonLiveVariables, 1627 ConjunctsInSsa, 157 ConjunctsInUnsatCore, 14 InterpolantComputations, 3 PerfectInterpolantSequences, 136/211 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...