./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9c69768cb083538b139479bdbb35676eb3378c1b ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9c69768cb083538b139479bdbb35676eb3378c1b ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 07:16:44,383 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 07:16:44,385 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 07:16:44,390 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 07:16:44,391 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 07:16:44,391 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 07:16:44,392 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 07:16:44,393 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 07:16:44,394 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 07:16:44,395 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 07:16:44,395 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 07:16:44,396 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 07:16:44,396 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 07:16:44,397 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 07:16:44,397 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 07:16:44,398 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 07:16:44,398 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 07:16:44,399 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 07:16:44,401 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 07:16:44,402 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 07:16:44,402 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 07:16:44,403 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 07:16:44,405 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 07:16:44,405 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 07:16:44,405 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 07:16:44,406 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 07:16:44,406 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 07:16:44,407 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 07:16:44,408 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 07:16:44,408 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 07:16:44,408 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 07:16:44,409 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 07:16:44,409 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 07:16:44,409 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 07:16:44,410 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 07:16:44,410 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 07:16:44,410 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 07:16:44,417 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 07:16:44,417 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 07:16:44,418 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 07:16:44,418 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 07:16:44,419 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 07:16:44,419 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 07:16:44,419 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 07:16:44,419 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 07:16:44,419 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 07:16:44,419 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 07:16:44,419 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 07:16:44,420 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 07:16:44,421 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 07:16:44,421 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 07:16:44,421 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 07:16:44,421 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 07:16:44,421 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 07:16:44,421 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 07:16:44,421 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 07:16:44,421 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 07:16:44,422 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 07:16:44,422 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 07:16:44,422 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 07:16:44,422 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9c69768cb083538b139479bdbb35676eb3378c1b [2018-11-23 07:16:44,445 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 07:16:44,455 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 07:16:44,457 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 07:16:44,458 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 07:16:44,459 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 07:16:44,459 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 07:16:44,504 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/c6d5e448a/54d6078d69754c77883fc2237ea2d622/FLAG1eab271bc [2018-11-23 07:16:44,987 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 07:16:44,987 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 07:16:45,000 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/c6d5e448a/54d6078d69754c77883fc2237ea2d622/FLAG1eab271bc [2018-11-23 07:16:45,478 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/c6d5e448a/54d6078d69754c77883fc2237ea2d622 [2018-11-23 07:16:45,480 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 07:16:45,481 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 07:16:45,482 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 07:16:45,482 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 07:16:45,484 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 07:16:45,484 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:45,486 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@513aa0f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45, skipping insertion in model container [2018-11-23 07:16:45,486 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:45,492 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 07:16:45,532 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 07:16:45,799 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 07:16:45,809 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 07:16:45,960 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 07:16:45,977 INFO L195 MainTranslator]: Completed translation [2018-11-23 07:16:45,977 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45 WrapperNode [2018-11-23 07:16:45,977 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 07:16:45,978 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 07:16:45,978 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 07:16:45,978 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 07:16:45,986 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,003 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,011 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 07:16:46,011 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 07:16:46,011 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 07:16:46,012 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 07:16:46,020 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,021 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,027 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,027 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,060 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,067 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,070 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... [2018-11-23 07:16:46,074 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 07:16:46,074 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 07:16:46,074 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 07:16:46,075 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 07:16:46,075 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 07:16:46,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 07:16:46,114 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 07:16:46,114 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 07:16:46,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 07:16:46,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 07:16:46,114 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 07:16:46,115 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 07:16:46,115 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 07:16:46,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 07:16:46,115 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 07:16:46,115 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 07:16:46,115 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 07:16:46,115 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 07:16:46,115 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 07:16:46,116 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 07:16:46,316 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 07:16:46,316 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 07:16:46,732 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 07:16:46,732 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 07:16:46,732 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 07:16:46 BoogieIcfgContainer [2018-11-23 07:16:46,732 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 07:16:46,733 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 07:16:46,733 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 07:16:46,735 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 07:16:46,735 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 07:16:45" (1/3) ... [2018-11-23 07:16:46,736 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@769486c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 07:16:46, skipping insertion in model container [2018-11-23 07:16:46,736 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:16:45" (2/3) ... [2018-11-23 07:16:46,736 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@769486c9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 07:16:46, skipping insertion in model container [2018-11-23 07:16:46,736 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 07:16:46" (3/3) ... [2018-11-23 07:16:46,738 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 07:16:46,744 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 07:16:46,749 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 07:16:46,760 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 07:16:46,782 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 07:16:46,783 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 07:16:46,783 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 07:16:46,783 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 07:16:46,783 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 07:16:46,783 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 07:16:46,783 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 07:16:46,783 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 07:16:46,783 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 07:16:46,797 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states. [2018-11-23 07:16:46,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 07:16:46,804 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:46,805 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:46,807 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:46,810 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:46,810 INFO L82 PathProgramCache]: Analyzing trace with hash 291877897, now seen corresponding path program 1 times [2018-11-23 07:16:46,811 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:46,812 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:46,844 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:46,844 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:46,844 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:46,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:47,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:47,029 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:47,029 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:47,032 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:47,039 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:47,040 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:47,042 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 4 states. [2018-11-23 07:16:47,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:47,367 INFO L93 Difference]: Finished difference Result 327 states and 541 transitions. [2018-11-23 07:16:47,368 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:47,369 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 07:16:47,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:47,376 INFO L225 Difference]: With dead ends: 327 [2018-11-23 07:16:47,376 INFO L226 Difference]: Without dead ends: 166 [2018-11-23 07:16:47,380 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:47,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-23 07:16:47,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-23 07:16:47,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:47,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 225 transitions. [2018-11-23 07:16:47,418 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 225 transitions. Word has length 51 [2018-11-23 07:16:47,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:47,419 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 225 transitions. [2018-11-23 07:16:47,419 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:47,419 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 225 transitions. [2018-11-23 07:16:47,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 07:16:47,421 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:47,421 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:47,421 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:47,422 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:47,422 INFO L82 PathProgramCache]: Analyzing trace with hash -1997725402, now seen corresponding path program 1 times [2018-11-23 07:16:47,422 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:47,422 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:47,423 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:47,424 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:47,424 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:47,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:47,547 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:47,547 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:47,547 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:47,548 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:47,549 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:47,549 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:47,549 INFO L87 Difference]: Start difference. First operand 149 states and 225 transitions. Second operand 4 states. [2018-11-23 07:16:47,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:47,740 INFO L93 Difference]: Finished difference Result 290 states and 435 transitions. [2018-11-23 07:16:47,740 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:47,740 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 07:16:47,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:47,741 INFO L225 Difference]: With dead ends: 290 [2018-11-23 07:16:47,741 INFO L226 Difference]: Without dead ends: 166 [2018-11-23 07:16:47,742 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:47,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2018-11-23 07:16:47,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 149. [2018-11-23 07:16:47,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:47,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 224 transitions. [2018-11-23 07:16:47,748 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 224 transitions. Word has length 64 [2018-11-23 07:16:47,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:47,749 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 224 transitions. [2018-11-23 07:16:47,749 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:47,749 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 224 transitions. [2018-11-23 07:16:47,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 07:16:47,750 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:47,751 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:47,751 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:47,751 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:47,751 INFO L82 PathProgramCache]: Analyzing trace with hash -111586923, now seen corresponding path program 1 times [2018-11-23 07:16:47,751 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:47,751 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:47,752 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:47,753 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:47,753 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:47,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:47,834 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:47,834 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:47,834 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:47,834 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:47,835 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:47,835 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:47,835 INFO L87 Difference]: Start difference. First operand 149 states and 224 transitions. Second operand 4 states. [2018-11-23 07:16:48,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:48,035 INFO L93 Difference]: Finished difference Result 288 states and 432 transitions. [2018-11-23 07:16:48,036 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:48,036 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 07:16:48,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:48,037 INFO L225 Difference]: With dead ends: 288 [2018-11-23 07:16:48,037 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 07:16:48,038 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:48,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 07:16:48,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 149. [2018-11-23 07:16:48,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:48,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 223 transitions. [2018-11-23 07:16:48,045 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 223 transitions. Word has length 65 [2018-11-23 07:16:48,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:48,046 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 223 transitions. [2018-11-23 07:16:48,046 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:48,046 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 223 transitions. [2018-11-23 07:16:48,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 07:16:48,047 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:48,047 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:48,047 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:48,047 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:48,048 INFO L82 PathProgramCache]: Analyzing trace with hash -1405721958, now seen corresponding path program 1 times [2018-11-23 07:16:48,048 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:48,048 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:48,049 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,049 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:48,049 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:48,124 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:48,125 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:48,125 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:48,125 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:48,125 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:48,125 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:48,125 INFO L87 Difference]: Start difference. First operand 149 states and 223 transitions. Second operand 4 states. [2018-11-23 07:16:48,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:48,287 INFO L93 Difference]: Finished difference Result 287 states and 430 transitions. [2018-11-23 07:16:48,288 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:48,288 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 07:16:48,288 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:48,289 INFO L225 Difference]: With dead ends: 287 [2018-11-23 07:16:48,289 INFO L226 Difference]: Without dead ends: 163 [2018-11-23 07:16:48,289 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:48,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-23 07:16:48,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-23 07:16:48,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:48,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 222 transitions. [2018-11-23 07:16:48,297 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 222 transitions. Word has length 65 [2018-11-23 07:16:48,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:48,297 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 222 transitions. [2018-11-23 07:16:48,297 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:48,297 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 222 transitions. [2018-11-23 07:16:48,298 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 07:16:48,298 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:48,298 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:48,299 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:48,299 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:48,299 INFO L82 PathProgramCache]: Analyzing trace with hash 68242562, now seen corresponding path program 1 times [2018-11-23 07:16:48,299 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:48,299 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:48,300 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,300 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:48,300 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:48,354 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:48,354 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:48,355 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:48,355 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:48,355 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:48,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:48,355 INFO L87 Difference]: Start difference. First operand 149 states and 222 transitions. Second operand 4 states. [2018-11-23 07:16:48,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:48,503 INFO L93 Difference]: Finished difference Result 287 states and 429 transitions. [2018-11-23 07:16:48,504 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:48,504 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 07:16:48,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:48,504 INFO L225 Difference]: With dead ends: 287 [2018-11-23 07:16:48,505 INFO L226 Difference]: Without dead ends: 163 [2018-11-23 07:16:48,505 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:48,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2018-11-23 07:16:48,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 149. [2018-11-23 07:16:48,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:48,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 221 transitions. [2018-11-23 07:16:48,511 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 221 transitions. Word has length 66 [2018-11-23 07:16:48,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:48,511 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 221 transitions. [2018-11-23 07:16:48,511 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:48,511 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 221 transitions. [2018-11-23 07:16:48,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 07:16:48,512 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:48,512 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:48,512 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:48,513 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:48,513 INFO L82 PathProgramCache]: Analyzing trace with hash -140287594, now seen corresponding path program 1 times [2018-11-23 07:16:48,513 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:48,513 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:48,514 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,514 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:48,514 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:48,591 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:48,591 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:48,591 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:48,592 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:48,592 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:48,592 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:48,592 INFO L87 Difference]: Start difference. First operand 149 states and 221 transitions. Second operand 4 states. [2018-11-23 07:16:48,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:48,753 INFO L93 Difference]: Finished difference Result 286 states and 427 transitions. [2018-11-23 07:16:48,753 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:48,753 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 07:16:48,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:48,754 INFO L225 Difference]: With dead ends: 286 [2018-11-23 07:16:48,754 INFO L226 Difference]: Without dead ends: 162 [2018-11-23 07:16:48,755 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:48,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-23 07:16:48,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-23 07:16:48,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:48,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 220 transitions. [2018-11-23 07:16:48,760 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 220 transitions. Word has length 66 [2018-11-23 07:16:48,760 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:48,760 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 220 transitions. [2018-11-23 07:16:48,760 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:48,760 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 220 transitions. [2018-11-23 07:16:48,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 07:16:48,760 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:48,760 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:48,760 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:48,761 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:48,761 INFO L82 PathProgramCache]: Analyzing trace with hash 13987441, now seen corresponding path program 1 times [2018-11-23 07:16:48,761 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:48,761 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:48,761 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,761 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:48,762 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:48,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:48,839 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:48,840 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:48,840 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:48,840 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:48,840 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:48,840 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:48,840 INFO L87 Difference]: Start difference. First operand 149 states and 220 transitions. Second operand 4 states. [2018-11-23 07:16:49,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:49,020 INFO L93 Difference]: Finished difference Result 286 states and 426 transitions. [2018-11-23 07:16:49,020 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:49,020 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 07:16:49,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:49,021 INFO L225 Difference]: With dead ends: 286 [2018-11-23 07:16:49,021 INFO L226 Difference]: Without dead ends: 162 [2018-11-23 07:16:49,021 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:49,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2018-11-23 07:16:49,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 149. [2018-11-23 07:16:49,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2018-11-23 07:16:49,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 219 transitions. [2018-11-23 07:16:49,025 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 219 transitions. Word has length 67 [2018-11-23 07:16:49,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:49,025 INFO L480 AbstractCegarLoop]: Abstraction has 149 states and 219 transitions. [2018-11-23 07:16:49,026 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:49,026 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 219 transitions. [2018-11-23 07:16:49,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 07:16:49,026 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:49,026 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:49,026 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:49,026 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:49,027 INFO L82 PathProgramCache]: Analyzing trace with hash -51019519, now seen corresponding path program 1 times [2018-11-23 07:16:49,027 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:49,027 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:49,028 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,028 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:49,028 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:49,083 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:49,083 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:49,084 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:49,084 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:49,084 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:49,084 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:49,085 INFO L87 Difference]: Start difference. First operand 149 states and 219 transitions. Second operand 4 states. [2018-11-23 07:16:49,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:49,295 INFO L93 Difference]: Finished difference Result 316 states and 474 transitions. [2018-11-23 07:16:49,296 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:49,296 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 07:16:49,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:49,297 INFO L225 Difference]: With dead ends: 316 [2018-11-23 07:16:49,297 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 07:16:49,298 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:49,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 07:16:49,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 171. [2018-11-23 07:16:49,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 07:16:49,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 257 transitions. [2018-11-23 07:16:49,304 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 257 transitions. Word has length 68 [2018-11-23 07:16:49,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:49,304 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 257 transitions. [2018-11-23 07:16:49,304 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:49,304 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 257 transitions. [2018-11-23 07:16:49,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 07:16:49,305 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:49,305 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:49,305 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:49,305 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:49,305 INFO L82 PathProgramCache]: Analyzing trace with hash 1424345341, now seen corresponding path program 1 times [2018-11-23 07:16:49,306 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:49,306 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:49,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,307 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:49,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:49,354 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:49,354 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:49,354 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:49,354 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:49,354 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:49,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:49,355 INFO L87 Difference]: Start difference. First operand 171 states and 257 transitions. Second operand 4 states. [2018-11-23 07:16:49,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:49,498 INFO L93 Difference]: Finished difference Result 330 states and 501 transitions. [2018-11-23 07:16:49,498 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:49,498 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 07:16:49,499 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:49,499 INFO L225 Difference]: With dead ends: 330 [2018-11-23 07:16:49,499 INFO L226 Difference]: Without dead ends: 184 [2018-11-23 07:16:49,500 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:49,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2018-11-23 07:16:49,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 171. [2018-11-23 07:16:49,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 07:16:49,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 256 transitions. [2018-11-23 07:16:49,503 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 256 transitions. Word has length 68 [2018-11-23 07:16:49,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:49,504 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 256 transitions. [2018-11-23 07:16:49,504 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:49,504 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 256 transitions. [2018-11-23 07:16:49,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 07:16:49,504 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:49,504 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:49,504 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:49,504 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:49,504 INFO L82 PathProgramCache]: Analyzing trace with hash 993066636, now seen corresponding path program 1 times [2018-11-23 07:16:49,504 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:49,505 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:49,505 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,505 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:49,506 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:49,537 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:49,538 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:49,538 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:49,538 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:49,538 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:49,538 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:49,539 INFO L87 Difference]: Start difference. First operand 171 states and 256 transitions. Second operand 4 states. [2018-11-23 07:16:49,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:49,685 INFO L93 Difference]: Finished difference Result 320 states and 487 transitions. [2018-11-23 07:16:49,686 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:49,686 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 07:16:49,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:49,686 INFO L225 Difference]: With dead ends: 320 [2018-11-23 07:16:49,686 INFO L226 Difference]: Without dead ends: 174 [2018-11-23 07:16:49,687 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:49,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2018-11-23 07:16:49,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 171. [2018-11-23 07:16:49,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 07:16:49,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 255 transitions. [2018-11-23 07:16:49,693 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 255 transitions. Word has length 69 [2018-11-23 07:16:49,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:49,693 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 255 transitions. [2018-11-23 07:16:49,693 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:49,693 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 255 transitions. [2018-11-23 07:16:49,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 07:16:49,694 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:49,696 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:49,696 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:49,696 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:49,696 INFO L82 PathProgramCache]: Analyzing trace with hash -1455151314, now seen corresponding path program 1 times [2018-11-23 07:16:49,696 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:49,696 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:49,697 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,697 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:49,697 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:49,780 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:49,781 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:49,781 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:49,781 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:49,781 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:49,781 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:49,782 INFO L87 Difference]: Start difference. First operand 171 states and 255 transitions. Second operand 4 states. [2018-11-23 07:16:49,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:49,933 INFO L93 Difference]: Finished difference Result 338 states and 509 transitions. [2018-11-23 07:16:49,933 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:49,933 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 07:16:49,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:49,934 INFO L225 Difference]: With dead ends: 338 [2018-11-23 07:16:49,934 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 07:16:49,935 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:49,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 07:16:49,938 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 171. [2018-11-23 07:16:49,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 07:16:49,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 254 transitions. [2018-11-23 07:16:49,940 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 254 transitions. Word has length 81 [2018-11-23 07:16:49,940 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:49,940 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 254 transitions. [2018-11-23 07:16:49,940 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:49,940 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 254 transitions. [2018-11-23 07:16:49,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 07:16:49,941 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:49,941 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:49,941 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:49,941 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:49,941 INFO L82 PathProgramCache]: Analyzing trace with hash -471659379, now seen corresponding path program 1 times [2018-11-23 07:16:49,941 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:49,941 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:49,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,942 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:49,942 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:49,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:49,978 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:49,978 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:49,978 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:49,978 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:49,978 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:49,978 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:49,979 INFO L87 Difference]: Start difference. First operand 171 states and 254 transitions. Second operand 4 states. [2018-11-23 07:16:50,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:50,124 INFO L93 Difference]: Finished difference Result 336 states and 505 transitions. [2018-11-23 07:16:50,125 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:50,125 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 07:16:50,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:50,126 INFO L225 Difference]: With dead ends: 336 [2018-11-23 07:16:50,126 INFO L226 Difference]: Without dead ends: 190 [2018-11-23 07:16:50,126 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:50,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2018-11-23 07:16:50,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 171. [2018-11-23 07:16:50,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 07:16:50,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 253 transitions. [2018-11-23 07:16:50,130 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 253 transitions. Word has length 82 [2018-11-23 07:16:50,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:50,130 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 253 transitions. [2018-11-23 07:16:50,130 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:50,130 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 253 transitions. [2018-11-23 07:16:50,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 07:16:50,131 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:50,131 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:50,131 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:50,131 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:50,131 INFO L82 PathProgramCache]: Analyzing trace with hash -1765794414, now seen corresponding path program 1 times [2018-11-23 07:16:50,131 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:50,131 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:50,132 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,132 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:50,132 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:50,163 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:50,163 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:50,163 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:50,163 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:50,164 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:50,164 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:50,164 INFO L87 Difference]: Start difference. First operand 171 states and 253 transitions. Second operand 4 states. [2018-11-23 07:16:50,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:50,309 INFO L93 Difference]: Finished difference Result 335 states and 502 transitions. [2018-11-23 07:16:50,310 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:50,310 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 07:16:50,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:50,311 INFO L225 Difference]: With dead ends: 335 [2018-11-23 07:16:50,311 INFO L226 Difference]: Without dead ends: 189 [2018-11-23 07:16:50,311 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:50,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2018-11-23 07:16:50,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 171. [2018-11-23 07:16:50,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 171 states. [2018-11-23 07:16:50,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 252 transitions. [2018-11-23 07:16:50,315 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 252 transitions. Word has length 82 [2018-11-23 07:16:50,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:50,315 INFO L480 AbstractCegarLoop]: Abstraction has 171 states and 252 transitions. [2018-11-23 07:16:50,315 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:50,315 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 252 transitions. [2018-11-23 07:16:50,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 07:16:50,316 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:50,316 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:50,316 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:50,317 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:50,317 INFO L82 PathProgramCache]: Analyzing trace with hash 1790898314, now seen corresponding path program 1 times [2018-11-23 07:16:50,317 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:50,317 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:50,317 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,318 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:50,318 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:50,355 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2018-11-23 07:16:50,355 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:50,355 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:50,356 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:50,356 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:50,356 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:50,356 INFO L87 Difference]: Start difference. First operand 171 states and 252 transitions. Second operand 4 states. [2018-11-23 07:16:50,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:50,578 INFO L93 Difference]: Finished difference Result 346 states and 519 transitions. [2018-11-23 07:16:50,579 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:50,579 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 07:16:50,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:50,580 INFO L225 Difference]: With dead ends: 346 [2018-11-23 07:16:50,580 INFO L226 Difference]: Without dead ends: 200 [2018-11-23 07:16:50,581 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:50,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2018-11-23 07:16:50,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 187. [2018-11-23 07:16:50,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187 states. [2018-11-23 07:16:50,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 278 transitions. [2018-11-23 07:16:50,585 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 278 transitions. Word has length 83 [2018-11-23 07:16:50,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:50,586 INFO L480 AbstractCegarLoop]: Abstraction has 187 states and 278 transitions. [2018-11-23 07:16:50,586 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:50,586 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 278 transitions. [2018-11-23 07:16:50,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 07:16:50,587 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:50,587 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:50,588 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:50,588 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:50,588 INFO L82 PathProgramCache]: Analyzing trace with hash 765876923, now seen corresponding path program 1 times [2018-11-23 07:16:50,588 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:50,588 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:50,589 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,589 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:50,589 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:50,667 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:50,667 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:50,667 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:50,667 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:50,668 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:50,668 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:50,668 INFO L87 Difference]: Start difference. First operand 187 states and 278 transitions. Second operand 4 states. [2018-11-23 07:16:50,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:50,879 INFO L93 Difference]: Finished difference Result 367 states and 552 transitions. [2018-11-23 07:16:50,880 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:50,880 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 07:16:50,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:50,881 INFO L225 Difference]: With dead ends: 367 [2018-11-23 07:16:50,881 INFO L226 Difference]: Without dead ends: 205 [2018-11-23 07:16:50,881 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:50,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2018-11-23 07:16:50,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 187. [2018-11-23 07:16:50,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187 states. [2018-11-23 07:16:50,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 277 transitions. [2018-11-23 07:16:50,885 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 277 transitions. Word has length 84 [2018-11-23 07:16:50,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:50,886 INFO L480 AbstractCegarLoop]: Abstraction has 187 states and 277 transitions. [2018-11-23 07:16:50,886 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:50,886 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 277 transitions. [2018-11-23 07:16:50,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 07:16:50,886 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:50,887 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:50,887 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:50,887 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:50,887 INFO L82 PathProgramCache]: Analyzing trace with hash -1403590617, now seen corresponding path program 1 times [2018-11-23 07:16:50,887 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:50,887 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:50,888 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,888 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:50,888 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:50,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:50,928 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2018-11-23 07:16:50,928 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:50,929 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 07:16:50,929 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 07:16:50,929 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 07:16:50,929 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:50,929 INFO L87 Difference]: Start difference. First operand 187 states and 277 transitions. Second operand 5 states. [2018-11-23 07:16:51,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:51,102 INFO L93 Difference]: Finished difference Result 358 states and 538 transitions. [2018-11-23 07:16:51,103 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-23 07:16:51,103 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 84 [2018-11-23 07:16:51,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:51,104 INFO L225 Difference]: With dead ends: 358 [2018-11-23 07:16:51,104 INFO L226 Difference]: Without dead ends: 196 [2018-11-23 07:16:51,104 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2018-11-23 07:16:51,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 196 states. [2018-11-23 07:16:51,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 196 to 196. [2018-11-23 07:16:51,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 07:16:51,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 288 transitions. [2018-11-23 07:16:51,109 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 288 transitions. Word has length 84 [2018-11-23 07:16:51,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:51,109 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 288 transitions. [2018-11-23 07:16:51,109 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 07:16:51,109 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 288 transitions. [2018-11-23 07:16:51,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-23 07:16:51,110 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:51,110 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:51,110 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:51,110 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:51,110 INFO L82 PathProgramCache]: Analyzing trace with hash -868983876, now seen corresponding path program 1 times [2018-11-23 07:16:51,110 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:51,110 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:51,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,111 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:51,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:51,151 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:51,152 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:51,152 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:51,152 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:51,152 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:51,152 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:51,152 INFO L87 Difference]: Start difference. First operand 196 states and 288 transitions. Second operand 4 states. [2018-11-23 07:16:51,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:51,299 INFO L93 Difference]: Finished difference Result 394 states and 583 transitions. [2018-11-23 07:16:51,300 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:51,300 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 07:16:51,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:51,301 INFO L225 Difference]: With dead ends: 394 [2018-11-23 07:16:51,301 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 07:16:51,302 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:51,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 07:16:51,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 196. [2018-11-23 07:16:51,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 07:16:51,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 287 transitions. [2018-11-23 07:16:51,308 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 287 transitions. Word has length 85 [2018-11-23 07:16:51,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:51,309 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 287 transitions. [2018-11-23 07:16:51,309 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:51,309 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 287 transitions. [2018-11-23 07:16:51,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 07:16:51,309 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:51,310 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:51,310 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:51,310 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:51,310 INFO L82 PathProgramCache]: Analyzing trace with hash 1360924576, now seen corresponding path program 1 times [2018-11-23 07:16:51,310 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:51,310 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:51,311 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,311 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:51,311 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:51,372 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:51,374 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:51,374 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:51,374 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:51,374 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:51,374 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:51,374 INFO L87 Difference]: Start difference. First operand 196 states and 287 transitions. Second operand 4 states. [2018-11-23 07:16:51,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:51,572 INFO L93 Difference]: Finished difference Result 394 states and 581 transitions. [2018-11-23 07:16:51,573 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:51,573 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 07:16:51,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:51,574 INFO L225 Difference]: With dead ends: 394 [2018-11-23 07:16:51,574 INFO L226 Difference]: Without dead ends: 223 [2018-11-23 07:16:51,575 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:51,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2018-11-23 07:16:51,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 196. [2018-11-23 07:16:51,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 07:16:51,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 286 transitions. [2018-11-23 07:16:51,580 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 286 transitions. Word has length 86 [2018-11-23 07:16:51,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:51,580 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 286 transitions. [2018-11-23 07:16:51,581 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:51,581 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 286 transitions. [2018-11-23 07:16:51,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2018-11-23 07:16:51,581 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:51,581 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:51,582 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:51,582 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:51,582 INFO L82 PathProgramCache]: Analyzing trace with hash -1155371775, now seen corresponding path program 1 times [2018-11-23 07:16:51,582 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:51,582 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:51,583 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,583 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:51,583 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:51,640 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:16:51,640 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:51,640 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:51,640 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:51,640 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:51,640 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:51,641 INFO L87 Difference]: Start difference. First operand 196 states and 286 transitions. Second operand 4 states. [2018-11-23 07:16:51,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:51,945 INFO L93 Difference]: Finished difference Result 384 states and 566 transitions. [2018-11-23 07:16:51,945 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:51,946 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 87 [2018-11-23 07:16:51,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:51,946 INFO L225 Difference]: With dead ends: 384 [2018-11-23 07:16:51,947 INFO L226 Difference]: Without dead ends: 213 [2018-11-23 07:16:51,947 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:51,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2018-11-23 07:16:51,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 196. [2018-11-23 07:16:51,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2018-11-23 07:16:51,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 285 transitions. [2018-11-23 07:16:51,952 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 285 transitions. Word has length 87 [2018-11-23 07:16:51,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:51,952 INFO L480 AbstractCegarLoop]: Abstraction has 196 states and 285 transitions. [2018-11-23 07:16:51,952 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:51,952 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 285 transitions. [2018-11-23 07:16:51,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 07:16:51,981 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:51,981 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:51,982 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:51,982 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:51,982 INFO L82 PathProgramCache]: Analyzing trace with hash -896304831, now seen corresponding path program 1 times [2018-11-23 07:16:51,982 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:51,982 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:51,983 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,983 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:51,983 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:51,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:52,074 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:52,075 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:52,075 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:52,075 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:52,075 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:52,075 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:52,075 INFO L87 Difference]: Start difference. First operand 196 states and 285 transitions. Second operand 4 states. [2018-11-23 07:16:52,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:52,327 INFO L93 Difference]: Finished difference Result 473 states and 703 transitions. [2018-11-23 07:16:52,327 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:52,327 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 07:16:52,328 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:52,328 INFO L225 Difference]: With dead ends: 473 [2018-11-23 07:16:52,328 INFO L226 Difference]: Without dead ends: 302 [2018-11-23 07:16:52,329 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:52,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2018-11-23 07:16:52,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 239. [2018-11-23 07:16:52,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 239 states. [2018-11-23 07:16:52,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 363 transitions. [2018-11-23 07:16:52,333 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 363 transitions. Word has length 90 [2018-11-23 07:16:52,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:52,333 INFO L480 AbstractCegarLoop]: Abstraction has 239 states and 363 transitions. [2018-11-23 07:16:52,334 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:52,334 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 363 transitions. [2018-11-23 07:16:52,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 07:16:52,334 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:52,334 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:52,335 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:52,335 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:52,335 INFO L82 PathProgramCache]: Analyzing trace with hash -1793698109, now seen corresponding path program 1 times [2018-11-23 07:16:52,335 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:52,335 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:52,336 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:52,336 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:52,336 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:52,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:52,373 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:52,373 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:52,374 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:52,374 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:52,375 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:52,375 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:52,375 INFO L87 Difference]: Start difference. First operand 239 states and 363 transitions. Second operand 4 states. [2018-11-23 07:16:52,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:52,550 INFO L93 Difference]: Finished difference Result 511 states and 784 transitions. [2018-11-23 07:16:52,551 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:52,551 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 07:16:52,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:52,552 INFO L225 Difference]: With dead ends: 511 [2018-11-23 07:16:52,552 INFO L226 Difference]: Without dead ends: 297 [2018-11-23 07:16:52,552 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:52,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2018-11-23 07:16:52,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 263. [2018-11-23 07:16:52,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:52,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 405 transitions. [2018-11-23 07:16:52,557 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 405 transitions. Word has length 90 [2018-11-23 07:16:52,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:52,557 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 405 transitions. [2018-11-23 07:16:52,557 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:52,557 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 405 transitions. [2018-11-23 07:16:52,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2018-11-23 07:16:52,558 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:52,558 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:52,558 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:52,558 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:52,558 INFO L82 PathProgramCache]: Analyzing trace with hash 1958988209, now seen corresponding path program 1 times [2018-11-23 07:16:52,558 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:52,558 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:52,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:52,559 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:52,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:52,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:52,598 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:52,598 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:52,599 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:52,599 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:52,599 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:52,599 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:52,599 INFO L87 Difference]: Start difference. First operand 263 states and 405 transitions. Second operand 4 states. [2018-11-23 07:16:52,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:52,748 INFO L93 Difference]: Finished difference Result 518 states and 804 transitions. [2018-11-23 07:16:52,748 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:52,748 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 96 [2018-11-23 07:16:52,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:52,750 INFO L225 Difference]: With dead ends: 518 [2018-11-23 07:16:52,750 INFO L226 Difference]: Without dead ends: 270 [2018-11-23 07:16:52,751 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 3 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:52,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2018-11-23 07:16:52,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 263. [2018-11-23 07:16:52,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:52,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 404 transitions. [2018-11-23 07:16:52,757 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 404 transitions. Word has length 96 [2018-11-23 07:16:52,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:52,757 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 404 transitions. [2018-11-23 07:16:52,757 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:52,757 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 404 transitions. [2018-11-23 07:16:52,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 07:16:52,758 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:52,758 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:52,758 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:52,758 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:52,758 INFO L82 PathProgramCache]: Analyzing trace with hash -175401234, now seen corresponding path program 1 times [2018-11-23 07:16:52,758 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:52,758 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:52,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:52,759 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:52,759 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:52,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:52,834 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:52,835 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:52,835 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:52,835 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:52,835 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:52,835 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:52,835 INFO L87 Difference]: Start difference. First operand 263 states and 404 transitions. Second operand 4 states. [2018-11-23 07:16:53,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:53,108 INFO L93 Difference]: Finished difference Result 564 states and 862 transitions. [2018-11-23 07:16:53,108 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:53,108 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 07:16:53,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:53,109 INFO L225 Difference]: With dead ends: 564 [2018-11-23 07:16:53,109 INFO L226 Difference]: Without dead ends: 326 [2018-11-23 07:16:53,110 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:53,110 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2018-11-23 07:16:53,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 263. [2018-11-23 07:16:53,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:53,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 403 transitions. [2018-11-23 07:16:53,116 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 403 transitions. Word has length 103 [2018-11-23 07:16:53,116 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:53,116 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 403 transitions. [2018-11-23 07:16:53,116 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:53,116 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 403 transitions. [2018-11-23 07:16:53,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 07:16:53,117 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:53,117 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:53,117 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:53,117 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:53,117 INFO L82 PathProgramCache]: Analyzing trace with hash -134726484, now seen corresponding path program 1 times [2018-11-23 07:16:53,117 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:53,117 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:53,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:53,118 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:53,118 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:53,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:53,171 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:53,171 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:53,171 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:53,172 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:53,173 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:53,173 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:53,173 INFO L87 Difference]: Start difference. First operand 263 states and 403 transitions. Second operand 4 states. [2018-11-23 07:16:53,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:53,392 INFO L93 Difference]: Finished difference Result 535 states and 821 transitions. [2018-11-23 07:16:53,392 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:53,392 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 07:16:53,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:53,393 INFO L225 Difference]: With dead ends: 535 [2018-11-23 07:16:53,394 INFO L226 Difference]: Without dead ends: 297 [2018-11-23 07:16:53,394 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:53,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2018-11-23 07:16:53,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 263. [2018-11-23 07:16:53,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:53,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 402 transitions. [2018-11-23 07:16:53,400 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 402 transitions. Word has length 103 [2018-11-23 07:16:53,400 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:53,400 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 402 transitions. [2018-11-23 07:16:53,400 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:53,400 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 402 transitions. [2018-11-23 07:16:53,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 07:16:53,401 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:53,401 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:53,401 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:53,402 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:53,402 INFO L82 PathProgramCache]: Analyzing trace with hash 545887437, now seen corresponding path program 1 times [2018-11-23 07:16:53,402 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:53,402 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:53,403 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:53,403 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:53,403 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:53,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:53,502 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:53,503 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:53,503 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:53,503 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:53,503 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:53,503 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:53,504 INFO L87 Difference]: Start difference. First operand 263 states and 402 transitions. Second operand 4 states. [2018-11-23 07:16:53,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:53,724 INFO L93 Difference]: Finished difference Result 562 states and 856 transitions. [2018-11-23 07:16:53,724 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:53,724 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 07:16:53,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:53,725 INFO L225 Difference]: With dead ends: 562 [2018-11-23 07:16:53,726 INFO L226 Difference]: Without dead ends: 324 [2018-11-23 07:16:53,726 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:53,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2018-11-23 07:16:53,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 263. [2018-11-23 07:16:53,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:53,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 401 transitions. [2018-11-23 07:16:53,732 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 401 transitions. Word has length 104 [2018-11-23 07:16:53,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:53,733 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 401 transitions. [2018-11-23 07:16:53,733 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:53,733 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 401 transitions. [2018-11-23 07:16:53,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 07:16:53,733 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:53,734 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:53,734 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:53,734 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:53,734 INFO L82 PathProgramCache]: Analyzing trace with hash -748247598, now seen corresponding path program 1 times [2018-11-23 07:16:53,734 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:53,734 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:53,735 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:53,735 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:53,735 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:53,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:53,782 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:53,782 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:53,782 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:53,782 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:53,783 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:53,783 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:53,783 INFO L87 Difference]: Start difference. First operand 263 states and 401 transitions. Second operand 4 states. [2018-11-23 07:16:54,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:54,116 INFO L93 Difference]: Finished difference Result 561 states and 853 transitions. [2018-11-23 07:16:54,116 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:54,116 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 07:16:54,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:54,117 INFO L225 Difference]: With dead ends: 561 [2018-11-23 07:16:54,118 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 07:16:54,118 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:54,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 07:16:54,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 07:16:54,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:54,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 400 transitions. [2018-11-23 07:16:54,126 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 400 transitions. Word has length 104 [2018-11-23 07:16:54,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:54,126 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 400 transitions. [2018-11-23 07:16:54,126 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:54,126 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 400 transitions. [2018-11-23 07:16:54,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 07:16:54,127 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:54,127 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:54,127 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:54,127 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:54,127 INFO L82 PathProgramCache]: Analyzing trace with hash 1806804687, now seen corresponding path program 1 times [2018-11-23 07:16:54,127 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:54,128 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:54,128 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:54,128 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:54,128 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:54,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:54,219 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:54,219 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:54,219 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:54,219 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:54,220 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:54,220 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:54,220 INFO L87 Difference]: Start difference. First operand 263 states and 400 transitions. Second operand 4 states. [2018-11-23 07:16:54,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:54,482 INFO L93 Difference]: Finished difference Result 533 states and 813 transitions. [2018-11-23 07:16:54,482 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:54,482 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 07:16:54,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:54,483 INFO L225 Difference]: With dead ends: 533 [2018-11-23 07:16:54,483 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 07:16:54,484 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:54,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 07:16:54,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 263. [2018-11-23 07:16:54,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:54,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 399 transitions. [2018-11-23 07:16:54,491 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 399 transitions. Word has length 104 [2018-11-23 07:16:54,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:54,491 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 399 transitions. [2018-11-23 07:16:54,491 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:54,491 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 399 transitions. [2018-11-23 07:16:54,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 07:16:54,492 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:54,492 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:54,493 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:54,493 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:54,493 INFO L82 PathProgramCache]: Analyzing trace with hash 512669652, now seen corresponding path program 1 times [2018-11-23 07:16:54,493 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:54,493 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:54,494 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:54,494 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:54,494 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:54,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:54,544 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:54,544 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:54,544 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:54,545 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:54,545 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:54,545 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:54,545 INFO L87 Difference]: Start difference. First operand 263 states and 399 transitions. Second operand 4 states. [2018-11-23 07:16:54,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:54,734 INFO L93 Difference]: Finished difference Result 532 states and 810 transitions. [2018-11-23 07:16:54,734 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:54,734 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 07:16:54,734 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:54,735 INFO L225 Difference]: With dead ends: 532 [2018-11-23 07:16:54,735 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 07:16:54,736 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:54,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 07:16:54,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 07:16:54,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:54,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 398 transitions. [2018-11-23 07:16:54,741 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 398 transitions. Word has length 104 [2018-11-23 07:16:54,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:54,741 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 398 transitions. [2018-11-23 07:16:54,742 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:54,742 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 398 transitions. [2018-11-23 07:16:54,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 07:16:54,742 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:54,743 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:54,743 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:54,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:54,743 INFO L82 PathProgramCache]: Analyzing trace with hash -624176389, now seen corresponding path program 1 times [2018-11-23 07:16:54,743 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:54,743 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:54,744 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:54,744 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:54,745 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:54,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:54,777 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:54,777 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:54,778 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:54,778 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:54,778 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:54,778 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:54,778 INFO L87 Difference]: Start difference. First operand 263 states and 398 transitions. Second operand 4 states. [2018-11-23 07:16:55,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:55,034 INFO L93 Difference]: Finished difference Result 561 states and 847 transitions. [2018-11-23 07:16:55,035 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:55,035 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 07:16:55,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:55,036 INFO L225 Difference]: With dead ends: 561 [2018-11-23 07:16:55,036 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 07:16:55,037 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:55,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 07:16:55,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 07:16:55,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:55,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 397 transitions. [2018-11-23 07:16:55,044 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 397 transitions. Word has length 106 [2018-11-23 07:16:55,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:55,044 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 397 transitions. [2018-11-23 07:16:55,044 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:55,044 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 397 transitions. [2018-11-23 07:16:55,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 07:16:55,045 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:55,045 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:55,045 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:55,046 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:55,046 INFO L82 PathProgramCache]: Analyzing trace with hash -63476611, now seen corresponding path program 1 times [2018-11-23 07:16:55,046 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:55,046 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:55,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,047 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:55,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:55,086 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:55,086 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:55,086 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:55,086 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:55,086 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:55,087 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:55,087 INFO L87 Difference]: Start difference. First operand 263 states and 397 transitions. Second operand 4 states. [2018-11-23 07:16:55,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:55,283 INFO L93 Difference]: Finished difference Result 532 states and 806 transitions. [2018-11-23 07:16:55,284 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:55,284 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 07:16:55,284 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:55,285 INFO L225 Difference]: With dead ends: 532 [2018-11-23 07:16:55,285 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 07:16:55,286 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:55,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 07:16:55,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 07:16:55,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:55,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 396 transitions. [2018-11-23 07:16:55,291 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 396 transitions. Word has length 106 [2018-11-23 07:16:55,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:55,291 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 396 transitions. [2018-11-23 07:16:55,291 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:55,291 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 396 transitions. [2018-11-23 07:16:55,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 07:16:55,292 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:55,292 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:55,292 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:55,292 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:55,293 INFO L82 PathProgramCache]: Analyzing trace with hash -1010963588, now seen corresponding path program 1 times [2018-11-23 07:16:55,293 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:55,293 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:55,293 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,294 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:55,294 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:55,329 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:55,329 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:55,329 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:55,329 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:55,329 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:55,330 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:55,330 INFO L87 Difference]: Start difference. First operand 263 states and 396 transitions. Second operand 4 states. [2018-11-23 07:16:55,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:55,646 INFO L93 Difference]: Finished difference Result 561 states and 843 transitions. [2018-11-23 07:16:55,647 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:55,647 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 07:16:55,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:55,648 INFO L225 Difference]: With dead ends: 561 [2018-11-23 07:16:55,648 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 07:16:55,649 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:55,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 07:16:55,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 07:16:55,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:55,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 395 transitions. [2018-11-23 07:16:55,656 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 395 transitions. Word has length 107 [2018-11-23 07:16:55,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:55,656 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 395 transitions. [2018-11-23 07:16:55,656 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:55,656 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 395 transitions. [2018-11-23 07:16:55,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 07:16:55,657 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:55,657 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:55,657 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:55,657 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:55,658 INFO L82 PathProgramCache]: Analyzing trace with hash -809139654, now seen corresponding path program 1 times [2018-11-23 07:16:55,658 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:55,658 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:55,658 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,659 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:55,659 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:55,703 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:55,703 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:55,703 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:55,704 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:55,704 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:55,704 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:55,704 INFO L87 Difference]: Start difference. First operand 263 states and 395 transitions. Second operand 4 states. [2018-11-23 07:16:55,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:55,869 INFO L93 Difference]: Finished difference Result 532 states and 802 transitions. [2018-11-23 07:16:55,869 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:55,869 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 07:16:55,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:55,869 INFO L225 Difference]: With dead ends: 532 [2018-11-23 07:16:55,870 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 07:16:55,870 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:55,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 07:16:55,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 07:16:55,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:55,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 394 transitions. [2018-11-23 07:16:55,877 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 394 transitions. Word has length 107 [2018-11-23 07:16:55,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:55,877 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 394 transitions. [2018-11-23 07:16:55,877 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:55,877 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 394 transitions. [2018-11-23 07:16:55,878 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 07:16:55,878 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:55,878 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:55,878 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:55,878 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:55,878 INFO L82 PathProgramCache]: Analyzing trace with hash 1254520800, now seen corresponding path program 1 times [2018-11-23 07:16:55,878 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:55,878 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:55,879 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,879 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:55,880 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:55,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:55,950 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:55,951 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:55,951 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:55,951 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:55,951 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:55,951 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:55,952 INFO L87 Difference]: Start difference. First operand 263 states and 394 transitions. Second operand 4 states. [2018-11-23 07:16:56,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:56,180 INFO L93 Difference]: Finished difference Result 561 states and 839 transitions. [2018-11-23 07:16:56,181 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:56,181 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 07:16:56,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:56,182 INFO L225 Difference]: With dead ends: 561 [2018-11-23 07:16:56,182 INFO L226 Difference]: Without dead ends: 323 [2018-11-23 07:16:56,182 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:56,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 323 states. [2018-11-23 07:16:56,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 323 to 263. [2018-11-23 07:16:56,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:56,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 393 transitions. [2018-11-23 07:16:56,188 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 393 transitions. Word has length 108 [2018-11-23 07:16:56,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:56,188 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 393 transitions. [2018-11-23 07:16:56,188 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:56,189 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 393 transitions. [2018-11-23 07:16:56,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 07:16:56,189 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:56,189 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:56,190 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:56,190 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:56,191 INFO L82 PathProgramCache]: Analyzing trace with hash -1078871838, now seen corresponding path program 1 times [2018-11-23 07:16:56,191 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:56,191 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:56,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,192 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:56,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:56,227 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:56,227 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:56,227 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:56,227 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:56,228 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:56,228 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:56,228 INFO L87 Difference]: Start difference. First operand 263 states and 393 transitions. Second operand 4 states. [2018-11-23 07:16:56,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:56,391 INFO L93 Difference]: Finished difference Result 532 states and 798 transitions. [2018-11-23 07:16:56,391 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:56,391 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 07:16:56,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:56,392 INFO L225 Difference]: With dead ends: 532 [2018-11-23 07:16:56,392 INFO L226 Difference]: Without dead ends: 294 [2018-11-23 07:16:56,392 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:56,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2018-11-23 07:16:56,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 263. [2018-11-23 07:16:56,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:56,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 392 transitions. [2018-11-23 07:16:56,398 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 392 transitions. Word has length 108 [2018-11-23 07:16:56,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:56,398 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 392 transitions. [2018-11-23 07:16:56,399 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:56,399 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 392 transitions. [2018-11-23 07:16:56,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 07:16:56,399 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:56,400 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:56,400 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:56,400 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:56,400 INFO L82 PathProgramCache]: Analyzing trace with hash -158921535, now seen corresponding path program 1 times [2018-11-23 07:16:56,400 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:56,400 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:56,401 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,401 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:56,401 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:56,452 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:56,452 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:56,452 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:56,453 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:56,453 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:56,453 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:56,453 INFO L87 Difference]: Start difference. First operand 263 states and 392 transitions. Second operand 4 states. [2018-11-23 07:16:56,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:56,728 INFO L93 Difference]: Finished difference Result 551 states and 822 transitions. [2018-11-23 07:16:56,729 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:56,729 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 07:16:56,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:56,730 INFO L225 Difference]: With dead ends: 551 [2018-11-23 07:16:56,730 INFO L226 Difference]: Without dead ends: 313 [2018-11-23 07:16:56,730 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:56,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-11-23 07:16:56,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 263. [2018-11-23 07:16:56,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:56,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 391 transitions. [2018-11-23 07:16:56,735 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 391 transitions. Word has length 109 [2018-11-23 07:16:56,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:56,735 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 391 transitions. [2018-11-23 07:16:56,735 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:56,735 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 391 transitions. [2018-11-23 07:16:56,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2018-11-23 07:16:56,736 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:56,736 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:56,736 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:56,737 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:56,737 INFO L82 PathProgramCache]: Analyzing trace with hash 520350719, now seen corresponding path program 1 times [2018-11-23 07:16:56,737 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:56,737 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:56,738 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,738 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:56,738 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:56,784 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:56,784 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:56,785 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:56,785 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:56,785 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:56,785 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:56,785 INFO L87 Difference]: Start difference. First operand 263 states and 391 transitions. Second operand 4 states. [2018-11-23 07:16:56,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:56,957 INFO L93 Difference]: Finished difference Result 522 states and 781 transitions. [2018-11-23 07:16:56,957 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:56,958 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 109 [2018-11-23 07:16:56,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:56,958 INFO L225 Difference]: With dead ends: 522 [2018-11-23 07:16:56,958 INFO L226 Difference]: Without dead ends: 284 [2018-11-23 07:16:56,959 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:56,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2018-11-23 07:16:56,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 263. [2018-11-23 07:16:56,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:56,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 390 transitions. [2018-11-23 07:16:56,962 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 390 transitions. Word has length 109 [2018-11-23 07:16:56,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:56,963 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 390 transitions. [2018-11-23 07:16:56,963 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:56,963 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 390 transitions. [2018-11-23 07:16:56,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 07:16:56,963 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:56,964 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:56,964 INFO L423 AbstractCegarLoop]: === Iteration 37 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:56,964 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:56,964 INFO L82 PathProgramCache]: Analyzing trace with hash 813684885, now seen corresponding path program 1 times [2018-11-23 07:16:56,964 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:56,964 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:56,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,965 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:56,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:56,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:57,025 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:16:57,025 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:57,025 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 07:16:57,025 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 07:16:57,025 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 07:16:57,025 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 07:16:57,026 INFO L87 Difference]: Start difference. First operand 263 states and 390 transitions. Second operand 4 states. [2018-11-23 07:16:57,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:57,295 INFO L93 Difference]: Finished difference Result 551 states and 818 transitions. [2018-11-23 07:16:57,296 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 07:16:57,296 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 07:16:57,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:57,296 INFO L225 Difference]: With dead ends: 551 [2018-11-23 07:16:57,296 INFO L226 Difference]: Without dead ends: 313 [2018-11-23 07:16:57,297 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 07:16:57,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2018-11-23 07:16:57,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 263. [2018-11-23 07:16:57,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 263 states. [2018-11-23 07:16:57,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 263 states to 263 states and 389 transitions. [2018-11-23 07:16:57,302 INFO L78 Accepts]: Start accepts. Automaton has 263 states and 389 transitions. Word has length 112 [2018-11-23 07:16:57,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:57,303 INFO L480 AbstractCegarLoop]: Abstraction has 263 states and 389 transitions. [2018-11-23 07:16:57,303 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 07:16:57,303 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 389 transitions. [2018-11-23 07:16:57,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 07:16:57,303 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:57,304 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:57,304 INFO L423 AbstractCegarLoop]: === Iteration 38 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:57,304 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:57,304 INFO L82 PathProgramCache]: Analyzing trace with hash -872494953, now seen corresponding path program 1 times [2018-11-23 07:16:57,304 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:57,304 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:57,305 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:57,305 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:57,305 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:57,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:57,352 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 07:16:57,353 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:57,353 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 07:16:57,353 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 07:16:57,353 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 07:16:57,353 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:16:57,354 INFO L87 Difference]: Start difference. First operand 263 states and 389 transitions. Second operand 3 states. [2018-11-23 07:16:57,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:57,422 INFO L93 Difference]: Finished difference Result 737 states and 1110 transitions. [2018-11-23 07:16:57,422 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 07:16:57,422 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 07:16:57,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:57,424 INFO L225 Difference]: With dead ends: 737 [2018-11-23 07:16:57,424 INFO L226 Difference]: Without dead ends: 499 [2018-11-23 07:16:57,424 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:16:57,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2018-11-23 07:16:57,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 499. [2018-11-23 07:16:57,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 499 states. [2018-11-23 07:16:57,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 746 transitions. [2018-11-23 07:16:57,435 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 746 transitions. Word has length 112 [2018-11-23 07:16:57,436 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:57,436 INFO L480 AbstractCegarLoop]: Abstraction has 499 states and 746 transitions. [2018-11-23 07:16:57,436 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 07:16:57,436 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 746 transitions. [2018-11-23 07:16:57,437 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 07:16:57,437 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:57,437 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:57,437 INFO L423 AbstractCegarLoop]: === Iteration 39 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:57,437 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:57,437 INFO L82 PathProgramCache]: Analyzing trace with hash 398999817, now seen corresponding path program 1 times [2018-11-23 07:16:57,437 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:57,437 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:57,438 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:57,438 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:57,438 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:57,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:16:57,483 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 07:16:57,483 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:16:57,483 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 07:16:57,484 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 07:16:57,484 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 07:16:57,484 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:16:57,484 INFO L87 Difference]: Start difference. First operand 499 states and 746 transitions. Second operand 3 states. [2018-11-23 07:16:57,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:16:57,536 INFO L93 Difference]: Finished difference Result 973 states and 1464 transitions. [2018-11-23 07:16:57,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 07:16:57,537 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 07:16:57,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:16:57,538 INFO L225 Difference]: With dead ends: 973 [2018-11-23 07:16:57,539 INFO L226 Difference]: Without dead ends: 499 [2018-11-23 07:16:57,539 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:16:57,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 499 states. [2018-11-23 07:16:57,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 499 to 499. [2018-11-23 07:16:57,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 499 states. [2018-11-23 07:16:57,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 499 states to 499 states and 741 transitions. [2018-11-23 07:16:57,552 INFO L78 Accepts]: Start accepts. Automaton has 499 states and 741 transitions. Word has length 131 [2018-11-23 07:16:57,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:16:57,552 INFO L480 AbstractCegarLoop]: Abstraction has 499 states and 741 transitions. [2018-11-23 07:16:57,552 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 07:16:57,552 INFO L276 IsEmpty]: Start isEmpty. Operand 499 states and 741 transitions. [2018-11-23 07:16:57,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-23 07:16:57,553 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:16:57,553 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:16:57,553 INFO L423 AbstractCegarLoop]: === Iteration 40 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:16:57,553 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:16:57,554 INFO L82 PathProgramCache]: Analyzing trace with hash -515907609, now seen corresponding path program 1 times [2018-11-23 07:16:57,554 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 07:16:57,554 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 07:16:57,558 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:57,559 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:16:57,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 07:16:57,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 07:16:57,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 07:16:57,700 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24604, |#NULL.offset|=24596, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24589, |~#SSLv3_server_data~0.offset|=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24596, |old(~#SSLv3_server_data~0.base)|=24589, |old(~#SSLv3_server_data~0.offset)|=24587, |old(~init~0)|=24608, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #607#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [main_~s~0.base=24597, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24597, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24601, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24610, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24579, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet13;call write~int(8464, ~s.base, 52 + ~s.offset, 4);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem14.base|=(- 1), |ssl3_accept_#t~mem14.offset|=2, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296;havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem17.base|=(- 2), |ssl3_accept_#t~mem17.offset|=3, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296);havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647;~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647;~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem68|=1, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem68;havoc #t~mem68;call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8656, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8656 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4);havoc #t~mem116.base, #t~mem116.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem117.base, #t~mem117.offset;assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=7, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 5; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4);assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem128.base|=24601, |ssl3_accept_#t~mem128.offset|=0, |ssl3_accept_#t~mem129|=24616, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem20|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem21|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem23|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8656 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8657 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8672, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8672 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647;~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(4 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 5 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=5, ssl3_accept_~buf~0.base=24605, ssl3_accept_~buf~0.offset=24578, ssl3_accept_~cb~0.base=(- 1), ssl3_accept_~cb~0.offset=2, ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24597, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24597, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24596, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24589, ~#SSLv3_server_data~0.offset=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24597, #t~malloc3.offset=0, #t~malloc4.base=24601, #t~malloc4.offset=0, #t~malloc5.base=24610, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24597, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet13; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0, 0; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem14.base=-1, #t~mem14.offset=2, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem16; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem17.base=-2, #t~mem17.offset=3, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129-L1133] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume 8464 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320-L1324] assume 0 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325-L1329] assume !(~ret~0 <= 0); [L1330] ~got_new_session~0 := 1; [L1331] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1332] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume 8496 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337-L1341] assume 1 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342-L1346] assume !(~ret~0 <= 0); [L1347] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem68=1, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] assume 0 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228-L1634] assume 8656 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554-L1559] assume !(0 == ~tmp___9~0); [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561-L1565] assume 2 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566-L1570] assume !(~ret~0 <= 0); [L1571] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1572] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228-L1634] assume !(8656 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231-L1633] assume !(8657 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234-L1632] assume 8672 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1592] assume !(4 == ~blastFlag~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587-L1591] assume 5 == ~blastFlag~0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24596, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24589, ~#SSLv3_server_data~0.offset=24587, ~init~0=24608] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24596, old(~#SSLv3_server_data~0.base)=24589, old(~#SSLv3_server_data~0.offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24597, #t~malloc3.offset=0, #t~malloc4.base=24601, #t~malloc4.offset=0, #t~malloc5.base=24610, #t~malloc5.offset=0, #t~malloc6.base=24579, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24597, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] call write~int(#t~nondet13, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet13; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0, 0; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem14.base=-1, #t~mem14.offset=2, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114-L1118] assume 0 != (#t~mem14.base + #t~mem14.offset) % 4294967296; [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] call #t~mem16 := read~int(~s.base, 28 + ~s.offset, 4); [L1119] call write~int(1 + #t~mem16, ~s.base, 28 + ~s.offset, 4); [L1119] havoc #t~mem16; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem17.base=-2, #t~mem17.offset=3, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129-L1133] assume !(0 == (#t~mem17.base + #t~mem17.offset) % 4294967296); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume 8464 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320-L1324] assume 0 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325-L1329] assume !(~ret~0 <= 0); [L1330] ~got_new_session~0 := 1; [L1331] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1332] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume 8496 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337-L1341] assume 1 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342-L1346] assume !(~ret~0 <= 0); [L1347] call #t~mem68 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem68=1, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] assume 0 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228-L1634] assume 8656 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, 836 + #t~mem117.offset, 4); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, 172 + #t~mem116.offset, 4); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554-L1559] assume !(0 == ~tmp___9~0); [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561-L1565] assume 2 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566-L1570] assume !(~ret~0 <= 0); [L1571] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1572] call write~int(0, ~s.base, 64 + ~s.offset, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1665] call #t~mem129 := read~int(#t~mem128.base, 848 + #t~mem128.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem128.base=24601, #t~mem128.offset=0, #t~mem129=24616, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665-L1693] assume !(0 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] assume !false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] call #t~mem18 := read~int(~s.base, 52 + ~s.offset, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138-L1664] assume !(12292 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem20=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141-L1663] assume !(16384 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem21=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144-L1662] assume !(8192 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147-L1661] assume !(24576 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem23=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150-L1660] assume !(8195 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153-L1659] assume !(8480 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156-L1658] assume !(8481 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159-L1657] assume !(8482 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162-L1656] assume !(8464 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165-L1655] assume !(8465 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168-L1654] assume !(8466 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171-L1653] assume !(8496 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174-L1652] assume !(8497 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177-L1651] assume !(8512 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180-L1650] assume !(8513 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183-L1649] assume !(8528 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186-L1648] assume !(8529 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189-L1647] assume !(8544 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192-L1646] assume !(8545 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195-L1645] assume !(8560 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198-L1644] assume !(8561 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201-L1643] assume !(8448 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204-L1642] assume !(8576 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207-L1641] assume !(8577 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210-L1640] assume !(8592 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213-L1639] assume !(8593 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216-L1638] assume !(8608 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219-L1637] assume !(8609 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222-L1636] assume !(8640 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225-L1635] assume !(8641 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228-L1634] assume !(8656 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231-L1633] assume !(8657 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234-L1632] assume 8672 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1592] assume !(4 == ~blastFlag~0); VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587-L1591] assume 5 == ~blastFlag~0; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s.base=24597, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=5, ~buf~0.base=24605, ~buf~0.offset=24578, ~cb~0.base=-1, ~cb~0.offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24597, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- [2018-11-23 07:16:59,547 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24589 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 07:16:59,548 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24587 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24596, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24589, ~#SSLv3_server_data~0!offset=24587, ~init~0=24608] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24596, old(~#SSLv3_server_data~0!base)=24589, old(~#SSLv3_server_data~0!offset)=24587, old(~init~0)=24608, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24597, #t~malloc3!offset=0, #t~malloc4!base=24601, #t~malloc4!offset=0, #t~malloc5!base=24610, #t~malloc5!offset=0, #t~malloc6!base=24579, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24597, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1107] FCALL call write~int(#t~nondet13, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet13; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0, offset: 0 }; [L1111] ~ret~0 := -1; [L1112] ~skip~0 := 0; [L1113] ~got_new_session~0 := 0; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem14!base=-1, #t~mem14!offset=2, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1114] COND TRUE 0 != (#t~mem14!base + #t~mem14!offset) % 4294967296 [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1119] FCALL call #t~mem16 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] FCALL call write~int(1 + #t~mem16, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1119] havoc #t~mem16; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1120-L1128] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem17!base=-2, #t~mem17!offset=3, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1129] COND FALSE !(0 == (#t~mem17!base + #t~mem17!offset) % 4294967296) [L1129] havoc #t~mem17; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND TRUE 8464 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1318] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1319] assume -2147483648 <= #t~nondet66 && #t~nondet66 <= 2147483647; [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1320] COND TRUE 0 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1325] COND FALSE !(~ret~0 <= 0) [L1330] ~got_new_session~0 := 1; [L1331] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1332] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND TRUE 8496 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1336] assume -2147483648 <= #t~nondet67 && #t~nondet67 <= 2147483647; [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1337] COND TRUE 1 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1342] COND FALSE !(~ret~0 <= 0) [L1347] FCALL call #t~mem68 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem68=1, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1347-L1351] COND TRUE 0 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1352] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1228] COND TRUE 8656 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp~3=0] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: 836 + #t~mem117!offset }, 4); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: 172 + #t~mem116!offset }, 4); [L1552] havoc #t~mem116; [L1552] havoc #t~mem118; [L1552] havoc #t~mem117; [L1553] assume -2147483648 <= #t~nondet119 && #t~nondet119 <= 2147483647; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=7, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] COND FALSE !(0 == ~tmp___9~0) [L1560] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1561] COND TRUE 2 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1566] COND FALSE !(~ret~0 <= 0) [L1571] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1572] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); [L1573] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1665] FCALL call #t~mem129 := read~int({ base: #t~mem128!base, offset: 848 + #t~mem128!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem128!base=24601, #t~mem128!offset=0, #t~mem129=24616, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1665] COND FALSE !(0 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1694] ~skip~0 := 0; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1137] FCALL call #t~mem18 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] COND FALSE !(12292 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem20=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1141] COND FALSE !(16384 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem21=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1144] COND FALSE !(8192 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1147] COND FALSE !(24576 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem23=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1150] COND FALSE !(8195 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1153] COND FALSE !(8480 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1156] COND FALSE !(8481 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1159] COND FALSE !(8482 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1162] COND FALSE !(8464 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1165] COND FALSE !(8465 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1168] COND FALSE !(8466 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1171] COND FALSE !(8496 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1174] COND FALSE !(8497 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1177] COND FALSE !(8512 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1180] COND FALSE !(8513 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1183] COND FALSE !(8528 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1186] COND FALSE !(8529 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1189] COND FALSE !(8544 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1192] COND FALSE !(8545 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1195] COND FALSE !(8560 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1198] COND FALSE !(8561 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1201] COND FALSE !(8448 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1204] COND FALSE !(8576 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1207] COND FALSE !(8577 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1210] COND FALSE !(8592 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1213] COND FALSE !(8593 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1216] COND FALSE !(8608 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1219] COND FALSE !(8609 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1222] COND FALSE !(8640 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1225] COND FALSE !(8641 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1228] COND FALSE !(8656 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1231] COND FALSE !(8657 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1234] COND TRUE 8672 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND FALSE !(4 == ~blastFlag~0) VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1587] COND TRUE 5 == ~blastFlag~0 VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1706] assert false; VAL [#in~s!base=24597, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=5, ~buf~0!base=24605, ~buf~0!offset=24578, ~cb~0!base=-1, ~cb~0!offset=2, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24597, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24608, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24588:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24597:0}, malloc(sizeof(SSL_CTX))={24610:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24601:0}, s={24597:0}, SSLv3_server_data={24588:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24597:0}, SSLv3_server_data={24588:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->info_callback={-1:2}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->cert={-2:3}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=0, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->hit=1, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 07:17:00,399 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 07:17:00 BoogieIcfgContainer [2018-11-23 07:17:00,399 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 07:17:00,400 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 07:17:00,400 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 07:17:00,402 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 07:17:00,402 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 07:16:46" (3/4) ... [2018-11-23 07:17:00,407 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 07:17:00,407 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 07:17:00,407 INFO L168 Benchmark]: Toolchain (without parser) took 14926.75 ms. Allocated memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: 336.6 MB). Free memory was 955.5 MB in the beginning and 1.0 GB in the end (delta: -71.3 MB). Peak memory consumption was 265.3 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:00,409 INFO L168 Benchmark]: CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 07:17:00,409 INFO L168 Benchmark]: CACSL2BoogieTranslator took 495.63 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 149.4 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -177.8 MB). Peak memory consumption was 44.2 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:00,410 INFO L168 Benchmark]: Boogie Procedure Inliner took 33.42 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 07:17:00,410 INFO L168 Benchmark]: Boogie Preprocessor took 62.41 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.1 MB). Peak memory consumption was 8.1 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:00,411 INFO L168 Benchmark]: RCFGBuilder took 658.12 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 81.6 MB). Peak memory consumption was 81.6 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:00,411 INFO L168 Benchmark]: TraceAbstraction took 13666.26 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 187.2 MB). Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 16.9 MB). Peak memory consumption was 204.1 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:00,412 INFO L168 Benchmark]: Witness Printer took 7.25 ms. Allocated memory is still 1.4 GB. Free memory is still 1.0 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 07:17:00,414 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 495.63 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 149.4 MB). Free memory was 955.5 MB in the beginning and 1.1 GB in the end (delta: -177.8 MB). Peak memory consumption was 44.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 33.42 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 62.41 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.1 MB). Peak memory consumption was 8.1 MB. Max. memory is 11.5 GB. * RCFGBuilder took 658.12 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 81.6 MB). Peak memory consumption was 81.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 13666.26 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 187.2 MB). Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 16.9 MB). Peak memory consumption was 204.1 MB. Max. memory is 11.5 GB. * Witness Printer took 7.25 ms. Allocated memory is still 1.4 GB. Free memory is still 1.0 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24589 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24587 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1706]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1120. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24608, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24588:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24597:0}, malloc(sizeof(SSL_CTX))={24610:0}, malloc(sizeof(SSL_SESSION))={24579:0}, malloc(sizeof(struct ssl3_state_st))={24601:0}, s={24597:0}, SSLv3_server_data={24588:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24597:0}, SSLv3_server_data={24588:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->info_callback={-1:2}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->cert={-2:3}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=0, buf={24605:24578}, got_new_session=0, init=1, ret=-1, s={24597:0}, s={24597:0}, s->state=8464, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=0, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=1, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8496, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->hit=1, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=2, buf={24605:24578}, got_new_session=1, init=1, ret=7, s={24597:0}, s={24597:0}, s->state=8656, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={-1:2}, (s->s3)->tmp.reuse_message=24616, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->s3={24601:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=1, s={24597:0}, s={24597:0}, s->state=8672, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={-1:2}, blastFlag=5, buf={24605:24578}, got_new_session=1, init=1, ret=0, s={24597:0}, s={24597:0}, skip=0, SSLv3_server_data={24588:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 156 locations, 1 error locations. UNSAFE Result, 13.6s OverallTime, 40 OverallIterations, 4 TraceHistogramMax, 7.9s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 7924 SDtfs, 2064 SDslu, 11202 SDs, 0 SdLazy, 6766 SolverSat, 332 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 6.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 263 GetRequests, 78 SyntacticMatches, 74 SemanticMatches, 111 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=499occurred in iteration=38, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 39 MinimizatonAttempts, 1079 StatesRemovedByMinimization, 36 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 3648 NumberOfCodeBlocks, 3648 NumberOfCodeBlocksAsserted, 40 NumberOfCheckSat, 3477 ConstructedInterpolants, 0 QuantifiedInterpolants, 861723 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 39 InterpolantComputations, 39 PerfectInterpolantSequences, 1623/1623 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 07:17:02,592 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 07:17:02,593 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 07:17:02,600 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 07:17:02,600 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 07:17:02,601 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 07:17:02,602 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 07:17:02,603 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 07:17:02,604 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 07:17:02,604 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 07:17:02,605 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 07:17:02,605 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 07:17:02,606 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 07:17:02,607 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 07:17:02,608 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 07:17:02,608 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 07:17:02,609 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 07:17:02,610 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 07:17:02,612 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 07:17:02,613 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 07:17:02,614 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 07:17:02,615 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 07:17:02,616 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 07:17:02,617 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 07:17:02,617 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 07:17:02,617 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 07:17:02,619 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 07:17:02,619 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 07:17:02,619 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 07:17:02,620 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 07:17:02,620 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 07:17:02,621 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 07:17:02,621 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 07:17:02,621 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 07:17:02,622 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 07:17:02,623 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 07:17:02,623 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Bitvector.epf [2018-11-23 07:17:02,634 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 07:17:02,634 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 07:17:02,635 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 07:17:02,635 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 07:17:02,635 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 07:17:02,635 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 07:17:02,635 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 07:17:02,636 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 07:17:02,636 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 07:17:02,637 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 07:17:02,637 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 07:17:02,638 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 07:17:02,638 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9c69768cb083538b139479bdbb35676eb3378c1b [2018-11-23 07:17:02,669 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 07:17:02,679 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 07:17:02,681 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 07:17:02,682 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 07:17:02,683 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 07:17:02,683 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/../../sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 07:17:02,726 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/8d42e41c3/27e209ad63d047fd99d7490263a0f049/FLAG0fc5b685f [2018-11-23 07:17:03,115 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 07:17:03,115 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/sv-benchmarks/c/ssh/s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 07:17:03,127 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/8d42e41c3/27e209ad63d047fd99d7490263a0f049/FLAG0fc5b685f [2018-11-23 07:17:03,484 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/data/8d42e41c3/27e209ad63d047fd99d7490263a0f049 [2018-11-23 07:17:03,486 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 07:17:03,487 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 07:17:03,488 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 07:17:03,488 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 07:17:03,492 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 07:17:03,493 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 07:17:03" (1/1) ... [2018-11-23 07:17:03,496 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e877b7e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:03, skipping insertion in model container [2018-11-23 07:17:03,496 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 07:17:03" (1/1) ... [2018-11-23 07:17:03,506 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 07:17:03,557 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 07:17:03,883 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 07:17:03,896 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 07:17:04,054 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 07:17:04,071 INFO L195 MainTranslator]: Completed translation [2018-11-23 07:17:04,072 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04 WrapperNode [2018-11-23 07:17:04,072 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 07:17:04,072 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 07:17:04,072 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 07:17:04,073 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 07:17:04,078 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,100 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,108 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 07:17:04,108 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 07:17:04,108 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 07:17:04,108 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 07:17:04,115 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,115 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,123 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,123 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,165 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,173 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,176 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... [2018-11-23 07:17:04,180 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 07:17:04,180 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 07:17:04,180 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 07:17:04,181 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 07:17:04,181 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 07:17:04,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 07:17:04,227 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 07:17:04,227 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 07:17:04,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 07:17:04,227 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 07:17:04,227 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 07:17:04,227 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 07:17:04,228 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 07:17:04,228 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 07:17:04,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 07:17:04,228 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 07:17:04,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 07:17:04,228 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 07:17:04,228 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 07:17:04,228 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 07:17:04,570 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 07:17:04,570 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 07:17:06,652 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 07:17:06,652 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 07:17:06,653 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 07:17:06 BoogieIcfgContainer [2018-11-23 07:17:06,653 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 07:17:06,654 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 07:17:06,654 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 07:17:06,657 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 07:17:06,657 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 07:17:03" (1/3) ... [2018-11-23 07:17:06,658 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@670b8ae0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 07:17:06, skipping insertion in model container [2018-11-23 07:17:06,658 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 07:17:04" (2/3) ... [2018-11-23 07:17:06,659 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@670b8ae0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 07:17:06, skipping insertion in model container [2018-11-23 07:17:06,659 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 07:17:06" (3/3) ... [2018-11-23 07:17:06,660 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.01_false-unreach-call.i.cil.c [2018-11-23 07:17:06,670 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 07:17:06,677 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 07:17:06,690 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 07:17:06,712 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 07:17:06,712 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 07:17:06,712 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 07:17:06,713 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 07:17:06,713 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 07:17:06,713 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 07:17:06,713 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 07:17:06,713 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 07:17:06,713 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 07:17:06,727 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states. [2018-11-23 07:17:06,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 07:17:06,734 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:17:06,734 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:17:06,736 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:17:06,740 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:17:06,740 INFO L82 PathProgramCache]: Analyzing trace with hash 291877897, now seen corresponding path program 1 times [2018-11-23 07:17:06,745 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 07:17:06,745 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 07:17:06,762 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:17:06,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:17:06,886 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 07:17:06,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:17:06,932 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 07:17:06,937 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:17:06,938 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 07:17:06,941 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 07:17:06,953 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 07:17:06,953 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:06,955 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 3 states. [2018-11-23 07:17:07,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:17:07,058 INFO L93 Difference]: Finished difference Result 426 states and 712 transitions. [2018-11-23 07:17:07,059 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 07:17:07,060 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-23 07:17:07,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:17:07,075 INFO L225 Difference]: With dead ends: 426 [2018-11-23 07:17:07,075 INFO L226 Difference]: Without dead ends: 259 [2018-11-23 07:17:07,079 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2018-11-23 07:17:07,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2018-11-23 07:17:07,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 259 states. [2018-11-23 07:17:07,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 387 transitions. [2018-11-23 07:17:07,139 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 387 transitions. Word has length 51 [2018-11-23 07:17:07,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:17:07,139 INFO L480 AbstractCegarLoop]: Abstraction has 259 states and 387 transitions. [2018-11-23 07:17:07,139 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 07:17:07,140 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 387 transitions. [2018-11-23 07:17:07,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 07:17:07,142 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:17:07,142 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:17:07,143 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:17:07,143 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:17:07,143 INFO L82 PathProgramCache]: Analyzing trace with hash -51019519, now seen corresponding path program 1 times [2018-11-23 07:17:07,144 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 07:17:07,144 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 07:17:07,170 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:17:07,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:17:07,257 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 07:17:07,272 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 07:17:07,272 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 07:17:07,279 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:17:07,279 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 07:17:07,280 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 07:17:07,281 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 07:17:07,281 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,281 INFO L87 Difference]: Start difference. First operand 259 states and 387 transitions. Second operand 3 states. [2018-11-23 07:17:07,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:17:07,350 INFO L93 Difference]: Finished difference Result 502 states and 760 transitions. [2018-11-23 07:17:07,350 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 07:17:07,351 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2018-11-23 07:17:07,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:17:07,353 INFO L225 Difference]: With dead ends: 502 [2018-11-23 07:17:07,353 INFO L226 Difference]: Without dead ends: 378 [2018-11-23 07:17:07,355 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2018-11-23 07:17:07,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 378. [2018-11-23 07:17:07,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 378 states. [2018-11-23 07:17:07,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 565 transitions. [2018-11-23 07:17:07,375 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 565 transitions. Word has length 68 [2018-11-23 07:17:07,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:17:07,376 INFO L480 AbstractCegarLoop]: Abstraction has 378 states and 565 transitions. [2018-11-23 07:17:07,376 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 07:17:07,376 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 565 transitions. [2018-11-23 07:17:07,379 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 07:17:07,379 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:17:07,380 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:17:07,380 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:17:07,380 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:17:07,380 INFO L82 PathProgramCache]: Analyzing trace with hash -896304831, now seen corresponding path program 1 times [2018-11-23 07:17:07,381 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 07:17:07,381 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 07:17:07,399 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:17:07,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:17:07,482 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 07:17:07,505 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 07:17:07,506 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 07:17:07,507 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:17:07,508 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 07:17:07,508 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 07:17:07,508 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 07:17:07,508 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,509 INFO L87 Difference]: Start difference. First operand 378 states and 565 transitions. Second operand 3 states. [2018-11-23 07:17:07,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:17:07,566 INFO L93 Difference]: Finished difference Result 741 states and 1118 transitions. [2018-11-23 07:17:07,567 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 07:17:07,567 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 90 [2018-11-23 07:17:07,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:17:07,569 INFO L225 Difference]: With dead ends: 741 [2018-11-23 07:17:07,569 INFO L226 Difference]: Without dead ends: 498 [2018-11-23 07:17:07,570 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2018-11-23 07:17:07,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 498. [2018-11-23 07:17:07,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 498 states. [2018-11-23 07:17:07,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 498 states to 498 states and 745 transitions. [2018-11-23 07:17:07,593 INFO L78 Accepts]: Start accepts. Automaton has 498 states and 745 transitions. Word has length 90 [2018-11-23 07:17:07,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:17:07,594 INFO L480 AbstractCegarLoop]: Abstraction has 498 states and 745 transitions. [2018-11-23 07:17:07,594 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 07:17:07,594 INFO L276 IsEmpty]: Start isEmpty. Operand 498 states and 745 transitions. [2018-11-23 07:17:07,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 07:17:07,597 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:17:07,598 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:17:07,598 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:17:07,598 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:17:07,598 INFO L82 PathProgramCache]: Analyzing trace with hash 398999817, now seen corresponding path program 1 times [2018-11-23 07:17:07,599 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 07:17:07,600 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 07:17:07,619 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:17:07,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 07:17:07,733 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 07:17:07,764 INFO L134 CoverageAnalysis]: Checked inductivity of 103 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2018-11-23 07:17:07,764 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 07:17:07,766 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 07:17:07,766 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 07:17:07,767 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 07:17:07,767 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 07:17:07,767 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,767 INFO L87 Difference]: Start difference. First operand 498 states and 745 transitions. Second operand 3 states. [2018-11-23 07:17:07,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 07:17:07,819 INFO L93 Difference]: Finished difference Result 858 states and 1288 transitions. [2018-11-23 07:17:07,819 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 07:17:07,819 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 131 [2018-11-23 07:17:07,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 07:17:07,822 INFO L225 Difference]: With dead ends: 858 [2018-11-23 07:17:07,822 INFO L226 Difference]: Without dead ends: 495 [2018-11-23 07:17:07,823 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 07:17:07,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 495 states. [2018-11-23 07:17:07,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 495 to 495. [2018-11-23 07:17:07,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 495 states. [2018-11-23 07:17:07,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 495 states to 495 states and 735 transitions. [2018-11-23 07:17:07,837 INFO L78 Accepts]: Start accepts. Automaton has 495 states and 735 transitions. Word has length 131 [2018-11-23 07:17:07,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 07:17:07,837 INFO L480 AbstractCegarLoop]: Abstraction has 495 states and 735 transitions. [2018-11-23 07:17:07,837 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 07:17:07,838 INFO L276 IsEmpty]: Start isEmpty. Operand 495 states and 735 transitions. [2018-11-23 07:17:07,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2018-11-23 07:17:07,839 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 07:17:07,839 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 07:17:07,840 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 07:17:07,840 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 07:17:07,840 INFO L82 PathProgramCache]: Analyzing trace with hash -515907609, now seen corresponding path program 1 times [2018-11-23 07:17:07,841 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 07:17:07,841 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/cvc4nyu Starting monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 07:17:07,857 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 07:17:08,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 07:17:08,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 07:17:09,179 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #607#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv7 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv7 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem14.base|=(_ bv0 32), |ssl3_accept_#t~mem14.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem17.base|=(_ bv1 32), |ssl3_accept_#t~mem17.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 07:17:09,709 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 07:17:09,710 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 07:17:09,908 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 07:17:09 BoogieIcfgContainer [2018-11-23 07:17:09,908 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 07:17:09,908 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 07:17:09,908 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 07:17:09,909 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 07:17:09,909 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 07:17:06" (3/4) ... [2018-11-23 07:17:09,912 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #607#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret139 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv7 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv7 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset;havoc #t~nondet8.base, #t~nondet8.offset;havoc ~l~0;havoc ~Time~0;~tmp~3 := #t~nondet9;havoc #t~nondet9;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet10;havoc #t~nondet10;~tmp___2~0 := #t~nondet11;havoc #t~nondet11;havoc ~tmp___3~0;havoc ~tmp___4~0;havoc ~tmp___5~0;havoc ~tmp___6~0;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet12;havoc #t~nondet12;havoc ~tmp___9~0;havoc ~tmp___10~0;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet13;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem14.base|=(_ bv0 32), |ssl3_accept_#t~mem14.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset);havoc #t~mem14.base, #t~mem14.offset;call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset;havoc #t~mem15.base, #t~mem15.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem16; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem17.base|=(_ bv1 32), |ssl3_accept_#t~mem17.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset));havoc #t~mem17.base, #t~mem17.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem27;havoc #t~mem27; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet66;havoc #t~nondet66; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem30;havoc #t~mem30; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet67;havoc #t~nondet67; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem68|=(_ bv256 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != #t~mem68;havoc #t~mem68;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8656bv32 == #t~mem49;havoc #t~mem49; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32);call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32);havoc #t~mem116.base, #t~mem116.offset;havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;~tmp___9~0 := #t~nondet119;havoc #t~nondet119; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 5bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32);~tmp___10~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem128.base|=(_ bv1 32), |ssl3_accept_#t~mem128.offset|=(_ bv0 32), |ssl3_accept_#t~mem129|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem129);havoc #t~mem128.base, #t~mem128.offset;havoc #t~mem129; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem18;havoc #t~mem18;call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem19);havoc #t~mem19;call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem20|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem20);havoc #t~mem20;call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem21|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem21);havoc #t~mem21;call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem22);havoc #t~mem22;call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem23|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem23);havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8656bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem50|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8657bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem51|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8672bv32 == #t~mem51;havoc #t~mem51; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv8 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet122;havoc #t~nondet122; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(4bv32 == ~blastFlag~0); VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 5bv32 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv5 32), ssl3_accept_~buf~0.base=(_ bv0 32), ssl3_accept_~buf~0.offset=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv7 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv7 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1048578 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=7bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=7bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] ~buf~0.base, ~buf~0.offset := #t~nondet8.base, #t~nondet8.offset; [L1081] havoc #t~nondet8.base, #t~nondet8.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet13, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet13; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] call #t~mem14.base, #t~mem14.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem14.base=0bv32, #t~mem14.offset=1bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114-L1118] assume 0bv32 != ~bvadd32(#t~mem14.base, #t~mem14.offset); [L1114] havoc #t~mem14.base, #t~mem14.offset; [L1115] call #t~mem15.base, #t~mem15.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1115] ~cb~0.base, ~cb~0.offset := #t~mem15.base, #t~mem15.offset; [L1115] havoc #t~mem15.base, #t~mem15.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] call #t~mem16 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1119] havoc #t~mem16; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] call #t~mem17.base, #t~mem17.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem17.base=1bv32, #t~mem17.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129-L1133] assume !(0bv32 == ~bvadd32(#t~mem17.base, #t~mem17.offset)); [L1129] havoc #t~mem17.base, #t~mem17.offset; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume 8464bv32 == #t~mem27; [L1162] havoc #t~mem27; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320-L1324] assume 0bv32 == ~blastFlag~0; [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325-L1329] assume !~bvsle32(~ret~0, 0bv32); [L1330] ~got_new_session~0 := 1bv32; [L1331] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1332] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume 8496bv32 == #t~mem30; [L1171] havoc #t~mem30; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337-L1341] assume 1bv32 == ~blastFlag~0; [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342-L1346] assume !~bvsle32(~ret~0, 0bv32); [L1347] call #t~mem68 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] assume 0bv32 != #t~mem68; [L1347] havoc #t~mem68; [L1348] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228-L1634] assume 8656bv32 == #t~mem49; [L1228] havoc #t~mem49; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] call #t~mem116.base, #t~mem116.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1552] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1552] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(#t~mem117.base, ~bvadd32(836bv32, #t~mem117.offset), 4bv32); [L1552] call write~$Pointer$(#t~mem118.base, #t~mem118.offset, #t~mem116.base, ~bvadd32(172bv32, #t~mem116.offset), 4bv32); [L1552] havoc #t~mem116.base, #t~mem116.offset; [L1552] havoc #t~mem117.base, #t~mem117.offset; [L1552] havoc #t~mem118.base, #t~mem118.offset; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554-L1559] assume !(0bv32 == ~tmp___9~0); [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561-L1565] assume 2bv32 == ~blastFlag~0; [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566-L1570] assume !~bvsle32(~ret~0, 0bv32); [L1571] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1572] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] call #t~mem128.base, #t~mem128.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1665] call #t~mem129 := read~intINTTYPE4(#t~mem128.base, ~bvadd32(848bv32, #t~mem128.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem128.base=1bv32, #t~mem128.offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665-L1693] assume !(0bv32 == #t~mem129); [L1665] havoc #t~mem128.base, #t~mem128.offset; [L1665] havoc #t~mem129; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] assume !false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] call #t~mem18 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] call #t~mem19 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138-L1664] assume !(12292bv32 == #t~mem19); [L1138] havoc #t~mem19; [L1141] call #t~mem20 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141-L1663] assume !(16384bv32 == #t~mem20); [L1141] havoc #t~mem20; [L1144] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144-L1662] assume !(8192bv32 == #t~mem21); [L1144] havoc #t~mem21; [L1147] call #t~mem22 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147-L1661] assume !(24576bv32 == #t~mem22); [L1147] havoc #t~mem22; [L1150] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150-L1660] assume !(8195bv32 == #t~mem23); [L1150] havoc #t~mem23; [L1153] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153-L1659] assume !(8480bv32 == #t~mem24); [L1153] havoc #t~mem24; [L1156] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156-L1658] assume !(8481bv32 == #t~mem25); [L1156] havoc #t~mem25; [L1159] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159-L1657] assume !(8482bv32 == #t~mem26); [L1159] havoc #t~mem26; [L1162] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162-L1656] assume !(8464bv32 == #t~mem27); [L1162] havoc #t~mem27; [L1165] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165-L1655] assume !(8465bv32 == #t~mem28); [L1165] havoc #t~mem28; [L1168] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168-L1654] assume !(8466bv32 == #t~mem29); [L1168] havoc #t~mem29; [L1171] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171-L1653] assume !(8496bv32 == #t~mem30); [L1171] havoc #t~mem30; [L1174] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174-L1652] assume !(8497bv32 == #t~mem31); [L1174] havoc #t~mem31; [L1177] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177-L1651] assume !(8512bv32 == #t~mem32); [L1177] havoc #t~mem32; [L1180] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180-L1650] assume !(8513bv32 == #t~mem33); [L1180] havoc #t~mem33; [L1183] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183-L1649] assume !(8528bv32 == #t~mem34); [L1183] havoc #t~mem34; [L1186] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186-L1648] assume !(8529bv32 == #t~mem35); [L1186] havoc #t~mem35; [L1189] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189-L1647] assume !(8544bv32 == #t~mem36); [L1189] havoc #t~mem36; [L1192] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192-L1646] assume !(8545bv32 == #t~mem37); [L1192] havoc #t~mem37; [L1195] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195-L1645] assume !(8560bv32 == #t~mem38); [L1195] havoc #t~mem38; [L1198] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198-L1644] assume !(8561bv32 == #t~mem39); [L1198] havoc #t~mem39; [L1201] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201-L1643] assume !(8448bv32 == #t~mem40); [L1201] havoc #t~mem40; [L1204] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204-L1642] assume !(8576bv32 == #t~mem41); [L1204] havoc #t~mem41; [L1207] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207-L1641] assume !(8577bv32 == #t~mem42); [L1207] havoc #t~mem42; [L1210] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210-L1640] assume !(8592bv32 == #t~mem43); [L1210] havoc #t~mem43; [L1213] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213-L1639] assume !(8593bv32 == #t~mem44); [L1213] havoc #t~mem44; [L1216] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216-L1638] assume !(8608bv32 == #t~mem45); [L1216] havoc #t~mem45; [L1219] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219-L1637] assume !(8609bv32 == #t~mem46); [L1219] havoc #t~mem46; [L1222] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222-L1636] assume !(8640bv32 == #t~mem47); [L1222] havoc #t~mem47; [L1225] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225-L1635] assume !(8641bv32 == #t~mem48); [L1225] havoc #t~mem48; [L1228] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228-L1634] assume !(8656bv32 == #t~mem49); [L1228] havoc #t~mem49; [L1231] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231-L1633] assume !(8657bv32 == #t~mem50); [L1231] havoc #t~mem50; [L1234] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234-L1632] assume 8672bv32 == #t~mem51; [L1234] havoc #t~mem51; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1592] assume !(4bv32 == ~blastFlag~0); VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587-L1591] assume 5bv32 == ~blastFlag~0; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s.base=7bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1048578bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=5bv32, ~buf~0.base=0bv32, ~buf~0.offset=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=7bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 07:17:13,941 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 07:17:13,941 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret139 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=7bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=7bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1708] ~s := #in~s; [L1081] ~buf~0 := #t~nondet8; [L1081] havoc #t~nondet8; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] ~tmp~3 := #t~nondet9; [L1084] havoc #t~nondet9; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet10; [L1092] havoc #t~nondet10; [L1093] ~tmp___2~0 := #t~nondet11; [L1093] havoc #t~nondet11; [L1094] havoc ~tmp___3~0; [L1095] havoc ~tmp___4~0; [L1096] havoc ~tmp___5~0; [L1097] havoc ~tmp___6~0; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet12; [L1099] havoc #t~nondet12; [L1100] havoc ~tmp___9~0; [L1101] havoc ~tmp___10~0; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet13, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet13; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~Time~0 := ~tmp~3; [L1110] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1111] ~ret~0 := 4294967295bv32; [L1112] ~skip~0 := 0bv32; [L1113] ~got_new_session~0 := 0bv32; [L1114] FCALL call #t~mem14 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem14!base=0bv32, #t~mem14!offset=1bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1114] COND TRUE 0bv32 != ~bvadd32(#t~mem14!base, #t~mem14!offset) [L1114] havoc #t~mem14; [L1115] FCALL call #t~mem15 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1115] ~cb~0 := #t~mem15; [L1115] havoc #t~mem15; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1119] FCALL call #t~mem16 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem16), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1119] havoc #t~mem16; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1120-L1128] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] FCALL call #t~mem17 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem17!base=1bv32, #t~mem17!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1129] COND FALSE !(0bv32 == ~bvadd32(#t~mem17!base, #t~mem17!offset)) [L1129] havoc #t~mem17; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND TRUE 8464bv32 == #t~mem27 [L1162] havoc #t~mem27; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1318] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1319] ~ret~0 := #t~nondet66; [L1319] havoc #t~nondet66; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1320] COND TRUE 0bv32 == ~blastFlag~0 [L1321] ~blastFlag~0 := 1bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1325] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1330] ~got_new_session~0 := 1bv32; [L1331] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1332] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND TRUE 8496bv32 == #t~mem30 [L1171] havoc #t~mem30; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1336] ~ret~0 := #t~nondet67; [L1336] havoc #t~nondet67; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1337] COND TRUE 1bv32 == ~blastFlag~0 [L1338] ~blastFlag~0 := 2bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1342] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1347] FCALL call #t~mem68 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem68=256bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1347-L1351] COND TRUE 0bv32 != #t~mem68 [L1347] havoc #t~mem68; [L1348] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1352] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1228] COND TRUE 8656bv32 == #t~mem49 [L1228] havoc #t~mem49; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp~3=0bv32] [L1552] FCALL call #t~mem116 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1552] FCALL call #t~mem118 := read~$Pointer$({ base: #t~mem117!base, offset: ~bvadd32(836bv32, #t~mem117!offset) }, 4bv32); [L1552] FCALL call write~$Pointer$(#t~mem118, { base: #t~mem116!base, offset: ~bvadd32(172bv32, #t~mem116!offset) }, 4bv32); [L1552] havoc #t~mem116; [L1552] havoc #t~mem117; [L1552] havoc #t~mem118; [L1553] ~tmp___9~0 := #t~nondet119; [L1553] havoc #t~nondet119; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] COND FALSE !(0bv32 == ~tmp___9~0) [L1560] ~ret~0 := #t~nondet120; [L1560] havoc #t~nondet120; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1561] COND TRUE 2bv32 == ~blastFlag~0 [L1562] ~blastFlag~0 := 5bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1566] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1571] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1572] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); [L1573] ~tmp___10~0 := #t~nondet121; [L1573] havoc #t~nondet121; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] FCALL call #t~mem128 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1665] FCALL call #t~mem129 := read~intINTTYPE4({ base: #t~mem128!base, offset: ~bvadd32(848bv32, #t~mem128!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem128!base=1bv32, #t~mem128!offset=0bv32, #t~mem129=64bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1665] COND FALSE !(0bv32 == #t~mem129) [L1665] havoc #t~mem128; [L1665] havoc #t~mem129; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1694] ~skip~0 := 0bv32; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1135-L1695] COND FALSE !(false) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1137] FCALL call #t~mem18 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1137] ~state~0 := #t~mem18; [L1137] havoc #t~mem18; [L1138] FCALL call #t~mem19 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] COND FALSE !(12292bv32 == #t~mem19) [L1138] havoc #t~mem19; [L1141] FCALL call #t~mem20 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem20=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1141] COND FALSE !(16384bv32 == #t~mem20) [L1141] havoc #t~mem20; [L1144] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem21=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1144] COND FALSE !(8192bv32 == #t~mem21) [L1144] havoc #t~mem21; [L1147] FCALL call #t~mem22 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1147] COND FALSE !(24576bv32 == #t~mem22) [L1147] havoc #t~mem22; [L1150] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem23=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1150] COND FALSE !(8195bv32 == #t~mem23) [L1150] havoc #t~mem23; [L1153] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1153] COND FALSE !(8480bv32 == #t~mem24) [L1153] havoc #t~mem24; [L1156] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1156] COND FALSE !(8481bv32 == #t~mem25) [L1156] havoc #t~mem25; [L1159] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1159] COND FALSE !(8482bv32 == #t~mem26) [L1159] havoc #t~mem26; [L1162] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1162] COND FALSE !(8464bv32 == #t~mem27) [L1162] havoc #t~mem27; [L1165] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1165] COND FALSE !(8465bv32 == #t~mem28) [L1165] havoc #t~mem28; [L1168] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1168] COND FALSE !(8466bv32 == #t~mem29) [L1168] havoc #t~mem29; [L1171] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1171] COND FALSE !(8496bv32 == #t~mem30) [L1171] havoc #t~mem30; [L1174] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1174] COND FALSE !(8497bv32 == #t~mem31) [L1174] havoc #t~mem31; [L1177] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1177] COND FALSE !(8512bv32 == #t~mem32) [L1177] havoc #t~mem32; [L1180] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1180] COND FALSE !(8513bv32 == #t~mem33) [L1180] havoc #t~mem33; [L1183] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1183] COND FALSE !(8528bv32 == #t~mem34) [L1183] havoc #t~mem34; [L1186] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1186] COND FALSE !(8529bv32 == #t~mem35) [L1186] havoc #t~mem35; [L1189] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1189] COND FALSE !(8544bv32 == #t~mem36) [L1189] havoc #t~mem36; [L1192] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1192] COND FALSE !(8545bv32 == #t~mem37) [L1192] havoc #t~mem37; [L1195] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1195] COND FALSE !(8560bv32 == #t~mem38) [L1195] havoc #t~mem38; [L1198] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1198] COND FALSE !(8561bv32 == #t~mem39) [L1198] havoc #t~mem39; [L1201] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1201] COND FALSE !(8448bv32 == #t~mem40) [L1201] havoc #t~mem40; [L1204] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1204] COND FALSE !(8576bv32 == #t~mem41) [L1204] havoc #t~mem41; [L1207] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1207] COND FALSE !(8577bv32 == #t~mem42) [L1207] havoc #t~mem42; [L1210] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1210] COND FALSE !(8592bv32 == #t~mem43) [L1210] havoc #t~mem43; [L1213] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1213] COND FALSE !(8593bv32 == #t~mem44) [L1213] havoc #t~mem44; [L1216] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1216] COND FALSE !(8608bv32 == #t~mem45) [L1216] havoc #t~mem45; [L1219] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1219] COND FALSE !(8609bv32 == #t~mem46) [L1219] havoc #t~mem46; [L1222] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1222] COND FALSE !(8640bv32 == #t~mem47) [L1222] havoc #t~mem47; [L1225] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1225] COND FALSE !(8641bv32 == #t~mem48) [L1225] havoc #t~mem48; [L1228] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1228] COND FALSE !(8656bv32 == #t~mem49) [L1228] havoc #t~mem49; [L1231] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1231] COND FALSE !(8657bv32 == #t~mem50) [L1231] havoc #t~mem50; [L1234] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1234] COND TRUE 8672bv32 == #t~mem51 [L1234] havoc #t~mem51; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=8bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet122; [L1583] havoc #t~nondet122; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND FALSE !(4bv32 == ~blastFlag~0) VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1587] COND TRUE 5bv32 == ~blastFlag~0 VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1706] assert false; VAL [#in~s!base=7bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1048578bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=5bv32, ~buf~0!base=0bv32, ~buf~0!offset=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=7bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 07:17:15,474 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_a3fd18f6-1b3a-4614-acde-aa3031e4b4be/bin-2019/uautomizer/witness.graphml [2018-11-23 07:17:15,474 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 07:17:15,475 INFO L168 Benchmark]: Toolchain (without parser) took 11988.07 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 208.1 MB). Free memory was 943.1 MB in the beginning and 999.3 MB in the end (delta: -56.1 MB). Peak memory consumption was 152.0 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,476 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 07:17:15,476 INFO L168 Benchmark]: CACSL2BoogieTranslator took 583.99 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 943.1 MB in the beginning and 1.1 GB in the end (delta: -168.1 MB). Peak memory consumption was 47.1 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,476 INFO L168 Benchmark]: Boogie Procedure Inliner took 35.73 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,477 INFO L168 Benchmark]: Boogie Preprocessor took 71.66 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.1 MB). Peak memory consumption was 8.1 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,477 INFO L168 Benchmark]: RCFGBuilder took 2472.59 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 85.3 MB). Peak memory consumption was 85.3 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,477 INFO L168 Benchmark]: TraceAbstraction took 3254.17 ms. Allocated memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 75.5 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -72.7 MB). Peak memory consumption was 2.8 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,477 INFO L168 Benchmark]: Witness Printer took 5565.72 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 999.3 MB in the end (delta: 84.5 MB). Peak memory consumption was 84.5 MB. Max. memory is 11.5 GB. [2018-11-23 07:17:15,479 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 583.99 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 132.6 MB). Free memory was 943.1 MB in the beginning and 1.1 GB in the end (delta: -168.1 MB). Peak memory consumption was 47.1 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 35.73 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 71.66 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.1 MB). Peak memory consumption was 8.1 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2472.59 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 85.3 MB). Peak memory consumption was 85.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 3254.17 ms. Allocated memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 75.5 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -72.7 MB). Peak memory consumption was 2.8 MB. Max. memory is 11.5 GB. * Witness Printer took 5565.72 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 999.3 MB in the end (delta: 84.5 MB). Peak memory consumption was 84.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1706]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1048578:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={7:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={7:0}, SSLv3_server_data={1048578:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={7:0}, SSLv3_server_data={1048578:0}] [L1081] BUF_MEM *buf = __VERIFIER_nondet_pointer() ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp = __VERIFIER_nondet_long() ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 ; [L1095] int tmp___4 ; [L1096] int tmp___5 ; [L1097] int tmp___6 ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 ; [L1101] int tmp___10 ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] Time = tmp [L1110] cb = (void (*)())((void *)0) [L1111] ret = -1 [L1112] skip = 0 [L1113] got_new_session = 0 [L1114] EXPR s->info_callback VAL [={0:0}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1114] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1115] EXPR s->info_callback [L1115] cb = s->info_callback [L1119] EXPR s->in_handshake [L1119] s->in_handshake += 1 [L1120] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] EXPR s->cert VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1129] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=0, buf={0:0}, got_new_session=0, init=1, ret=4294967295, s={7:0}, s={7:0}, s->state=8464, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND TRUE s->state == 8464 [L1318] s->shutdown = 0 [L1319] ret = __VERIFIER_nondet_int() [L1320] COND TRUE blastFlag == 0 [L1321] blastFlag = 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=0, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1325] COND FALSE !(ret <= 0) [L1330] got_new_session = 1 [L1331] s->state = 8496 [L1332] s->init_num = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=1, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8496, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND TRUE s->state == 8496 [L1336] ret = __VERIFIER_nondet_int() [L1337] COND TRUE blastFlag == 1 [L1338] blastFlag = 2 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1342] COND FALSE !(ret <= 0) [L1347] s->hit VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->hit=256, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1347] COND TRUE s->hit [L1348] s->state = 8656 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1352] s->init_num = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=2, buf={0:0}, got_new_session=1, init=1, ret=1073741824, s={7:0}, s={7:0}, s->state=8656, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0] [L1228] COND TRUE s->state == 8656 [L1552] EXPR s->session [L1552] EXPR s->s3 [L1552] EXPR (s->s3)->tmp.new_cipher [L1552] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1553] tmp___9 = __VERIFIER_nondet_int() [L1554] COND FALSE !(! tmp___9) [L1560] ret = __VERIFIER_nondet_int() [L1561] COND TRUE blastFlag == 2 [L1562] blastFlag = 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___2=0, tmp___8=0, tmp___9=1] [L1566] COND FALSE !(ret <= 0) [L1571] s->state = 8672 [L1572] s->init_num = 0 [L1573] tmp___10 = __VERIFIER_nondet_int() [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] EXPR s->s3 [L1665] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1665] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1694] skip = 0 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1135] COND TRUE 1 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1137] EXPR s->state [L1137] state = s->state [L1138] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1138] COND FALSE !(s->state == 12292) [L1141] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1141] COND FALSE !(s->state == 16384) [L1144] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1144] COND FALSE !(s->state == 8192) [L1147] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1147] COND FALSE !(s->state == 24576) [L1150] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1150] COND FALSE !(s->state == 8195) [L1153] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1153] COND FALSE !(s->state == 8480) [L1156] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1156] COND FALSE !(s->state == 8481) [L1159] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1159] COND FALSE !(s->state == 8482) [L1162] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1162] COND FALSE !(s->state == 8464) [L1165] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1165] COND FALSE !(s->state == 8465) [L1168] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1168] COND FALSE !(s->state == 8466) [L1171] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1171] COND FALSE !(s->state == 8496) [L1174] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1174] COND FALSE !(s->state == 8497) [L1177] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1177] COND FALSE !(s->state == 8512) [L1180] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1180] COND FALSE !(s->state == 8513) [L1183] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1183] COND FALSE !(s->state == 8528) [L1186] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1186] COND FALSE !(s->state == 8529) [L1189] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1189] COND FALSE !(s->state == 8544) [L1192] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1192] COND FALSE !(s->state == 8545) [L1195] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1195] COND FALSE !(s->state == 8560) [L1198] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1198] COND FALSE !(s->state == 8561) [L1201] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1201] COND FALSE !(s->state == 8448) [L1204] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1204] COND FALSE !(s->state == 8576) [L1207] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1207] COND FALSE !(s->state == 8577) [L1210] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1210] COND FALSE !(s->state == 8592) [L1213] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1213] COND FALSE !(s->state == 8593) [L1216] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1216] COND FALSE !(s->state == 8608) [L1219] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1219] COND FALSE !(s->state == 8609) [L1222] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1222] COND FALSE !(s->state == 8640) [L1225] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1225] COND FALSE !(s->state == 8641) [L1228] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1228] COND FALSE !(s->state == 8656) [L1231] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1231] COND FALSE !(s->state == 8657) [L1234] EXPR s->state VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=8, s={7:0}, s={7:0}, s->state=8672, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1234] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND FALSE !(blastFlag == 4) VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1587] COND TRUE blastFlag == 5 VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] [L1706] __VERIFIER_error() VAL [={0:1}, blastFlag=5, buf={0:0}, got_new_session=1, init=1, ret=0, s={7:0}, s={7:0}, skip=0, SSLv3_server_data={1048578:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 156 locations, 1 error locations. UNSAFE Result, 3.1s OverallTime, 5 OverallIterations, 4 TraceHistogramMax, 0.3s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 1372 SDtfs, 597 SDslu, 804 SDs, 0 SdLazy, 69 SolverSat, 20 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 336 GetRequests, 332 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=498occurred in iteration=3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 472 NumberOfCodeBlocks, 472 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 336 ConstructedInterpolants, 0 QuantifiedInterpolants, 60078 SizeOfPredicates, 4 NumberOfNonLiveVariables, 1165 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 153/153 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...