./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bf0d0cf8dda9e68b67ebf00ec54daecd196b7f63 ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bf0d0cf8dda9e68b67ebf00ec54daecd196b7f63 .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 09:55:03,054 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 09:55:03,055 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 09:55:03,063 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 09:55:03,063 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 09:55:03,063 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 09:55:03,064 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 09:55:03,065 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 09:55:03,066 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 09:55:03,067 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 09:55:03,068 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 09:55:03,068 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 09:55:03,068 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 09:55:03,069 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 09:55:03,070 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 09:55:03,070 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 09:55:03,071 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 09:55:03,072 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 09:55:03,073 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 09:55:03,074 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 09:55:03,075 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 09:55:03,076 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 09:55:03,078 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 09:55:03,078 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 09:55:03,078 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 09:55:03,079 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 09:55:03,079 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 09:55:03,080 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 09:55:03,081 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 09:55:03,081 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 09:55:03,081 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 09:55:03,082 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 09:55:03,082 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 09:55:03,082 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 09:55:03,083 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 09:55:03,083 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 09:55:03,084 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2018-11-23 09:55:03,093 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 09:55:03,093 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 09:55:03,094 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 09:55:03,094 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 09:55:03,094 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 09:55:03,094 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 09:55:03,094 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 09:55:03,095 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 09:55:03,095 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 09:55:03,095 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 09:55:03,095 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 09:55:03,095 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 09:55:03,095 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 09:55:03,096 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 09:55:03,096 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 09:55:03,096 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 09:55:03,096 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 09:55:03,096 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 09:55:03,096 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 09:55:03,096 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 09:55:03,097 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 09:55:03,097 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 09:55:03,097 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 09:55:03,097 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:55:03,097 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 09:55:03,097 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 09:55:03,098 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 09:55:03,098 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-23 09:55:03,098 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 09:55:03,098 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 09:55:03,098 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bf0d0cf8dda9e68b67ebf00ec54daecd196b7f63 [2018-11-23 09:55:03,121 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 09:55:03,130 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 09:55:03,132 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 09:55:03,133 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 09:55:03,133 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 09:55:03,133 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/../../sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c [2018-11-23 09:55:03,168 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/3120baef8/99d2fab2ff1e42f187d677ad6c962de2/FLAG9fd34d0e4 [2018-11-23 09:55:03,631 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 09:55:03,632 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c [2018-11-23 09:55:03,643 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/3120baef8/99d2fab2ff1e42f187d677ad6c962de2/FLAG9fd34d0e4 [2018-11-23 09:55:04,150 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/3120baef8/99d2fab2ff1e42f187d677ad6c962de2 [2018-11-23 09:55:04,153 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 09:55:04,154 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 09:55:04,155 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 09:55:04,155 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 09:55:04,157 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 09:55:04,158 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,160 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@513aa0f8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04, skipping insertion in model container [2018-11-23 09:55:04,160 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,166 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 09:55:04,204 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 09:55:04,520 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 09:55:04,527 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 09:55:04,599 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 09:55:04,616 INFO L195 MainTranslator]: Completed translation [2018-11-23 09:55:04,616 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04 WrapperNode [2018-11-23 09:55:04,617 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 09:55:04,617 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 09:55:04,617 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 09:55:04,617 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 09:55:04,625 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,642 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,650 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 09:55:04,650 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 09:55:04,650 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 09:55:04,650 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 09:55:04,658 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,659 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,665 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,665 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,700 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,707 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,710 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... [2018-11-23 09:55:04,713 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 09:55:04,714 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 09:55:04,714 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 09:55:04,714 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 09:55:04,715 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:55:04,763 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 09:55:04,763 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 09:55:04,763 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 09:55:04,763 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 09:55:04,764 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 09:55:04,764 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 09:55:04,764 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 09:55:04,765 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 09:55:05,056 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 09:55:05,056 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 09:55:05,616 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 09:55:05,616 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 09:55:05,617 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:55:05 BoogieIcfgContainer [2018-11-23 09:55:05,617 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 09:55:05,617 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 09:55:05,617 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 09:55:05,619 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 09:55:05,619 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:55:04" (1/3) ... [2018-11-23 09:55:05,620 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7137655 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:55:05, skipping insertion in model container [2018-11-23 09:55:05,620 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:04" (2/3) ... [2018-11-23 09:55:05,620 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7137655 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:55:05, skipping insertion in model container [2018-11-23 09:55:05,620 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:55:05" (3/3) ... [2018-11-23 09:55:05,622 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.02_false-unreach-call.i.cil.c [2018-11-23 09:55:05,628 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 09:55:05,634 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 09:55:05,644 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 09:55:05,666 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 09:55:05,666 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 09:55:05,667 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 09:55:05,667 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 09:55:05,667 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 09:55:05,667 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 09:55:05,667 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 09:55:05,667 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 09:55:05,667 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 09:55:05,682 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states. [2018-11-23 09:55:05,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 09:55:05,689 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:05,690 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:05,692 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:05,695 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:05,696 INFO L82 PathProgramCache]: Analyzing trace with hash 1762902688, now seen corresponding path program 1 times [2018-11-23 09:55:05,697 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:05,697 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:05,731 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:05,732 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:05,732 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:05,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:05,944 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:05,946 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:05,947 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:05,950 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:05,962 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:05,962 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:05,965 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 4 states. [2018-11-23 09:55:06,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:06,303 INFO L93 Difference]: Finished difference Result 323 states and 538 transitions. [2018-11-23 09:55:06,304 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:06,305 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2018-11-23 09:55:06,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:06,314 INFO L225 Difference]: With dead ends: 323 [2018-11-23 09:55:06,315 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 09:55:06,318 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:06,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 09:55:06,353 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 147. [2018-11-23 09:55:06,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 147 states. [2018-11-23 09:55:06,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 222 transitions. [2018-11-23 09:55:06,357 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 222 transitions. Word has length 51 [2018-11-23 09:55:06,357 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:06,357 INFO L480 AbstractCegarLoop]: Abstraction has 147 states and 222 transitions. [2018-11-23 09:55:06,358 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:06,358 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 222 transitions. [2018-11-23 09:55:06,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2018-11-23 09:55:06,360 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:06,361 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:06,361 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:06,361 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:06,361 INFO L82 PathProgramCache]: Analyzing trace with hash -772543898, now seen corresponding path program 1 times [2018-11-23 09:55:06,361 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:06,362 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:06,363 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:06,363 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:06,363 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:06,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:06,474 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:06,475 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:06,475 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:06,476 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:06,476 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:06,476 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:06,477 INFO L87 Difference]: Start difference. First operand 147 states and 222 transitions. Second operand 4 states. [2018-11-23 09:55:06,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:06,693 INFO L93 Difference]: Finished difference Result 286 states and 429 transitions. [2018-11-23 09:55:06,693 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:06,693 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 64 [2018-11-23 09:55:06,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:06,695 INFO L225 Difference]: With dead ends: 286 [2018-11-23 09:55:06,695 INFO L226 Difference]: Without dead ends: 164 [2018-11-23 09:55:06,697 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:06,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2018-11-23 09:55:06,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 147. [2018-11-23 09:55:06,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 147 states. [2018-11-23 09:55:06,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 221 transitions. [2018-11-23 09:55:06,707 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 221 transitions. Word has length 64 [2018-11-23 09:55:06,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:06,707 INFO L480 AbstractCegarLoop]: Abstraction has 147 states and 221 transitions. [2018-11-23 09:55:06,707 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:06,707 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 221 transitions. [2018-11-23 09:55:06,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 09:55:06,709 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:06,709 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:06,709 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:06,709 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:06,711 INFO L82 PathProgramCache]: Analyzing trace with hash 579930898, now seen corresponding path program 1 times [2018-11-23 09:55:06,711 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:06,711 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:06,712 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:06,712 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:06,713 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:06,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:06,809 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:06,809 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:06,809 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-23 09:55:06,810 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2018-11-23 09:55:06,810 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-23 09:55:06,810 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:06,811 INFO L87 Difference]: Start difference. First operand 147 states and 221 transitions. Second operand 5 states. [2018-11-23 09:55:07,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:07,138 INFO L93 Difference]: Finished difference Result 290 states and 437 transitions. [2018-11-23 09:55:07,138 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2018-11-23 09:55:07,138 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 65 [2018-11-23 09:55:07,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:07,139 INFO L225 Difference]: With dead ends: 290 [2018-11-23 09:55:07,140 INFO L226 Difference]: Without dead ends: 168 [2018-11-23 09:55:07,140 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2018-11-23 09:55:07,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2018-11-23 09:55:07,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 167. [2018-11-23 09:55:07,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 09:55:07,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 247 transitions. [2018-11-23 09:55:07,151 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 247 transitions. Word has length 65 [2018-11-23 09:55:07,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:07,151 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 247 transitions. [2018-11-23 09:55:07,151 INFO L481 AbstractCegarLoop]: Interpolant automaton has 5 states. [2018-11-23 09:55:07,152 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 247 transitions. [2018-11-23 09:55:07,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 09:55:07,153 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:07,153 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:07,153 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:07,154 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:07,154 INFO L82 PathProgramCache]: Analyzing trace with hash -1640320823, now seen corresponding path program 1 times [2018-11-23 09:55:07,154 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:07,154 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:07,157 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,157 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:07,157 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:07,234 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:07,235 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:07,235 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:07,235 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:07,235 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:07,235 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:07,236 INFO L87 Difference]: Start difference. First operand 167 states and 247 transitions. Second operand 4 states. [2018-11-23 09:55:07,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:07,447 INFO L93 Difference]: Finished difference Result 323 states and 477 transitions. [2018-11-23 09:55:07,447 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:07,448 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 09:55:07,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:07,449 INFO L225 Difference]: With dead ends: 323 [2018-11-23 09:55:07,449 INFO L226 Difference]: Without dead ends: 181 [2018-11-23 09:55:07,450 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:07,450 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 181 states. [2018-11-23 09:55:07,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 181 to 167. [2018-11-23 09:55:07,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 09:55:07,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 246 transitions. [2018-11-23 09:55:07,459 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 246 transitions. Word has length 65 [2018-11-23 09:55:07,459 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:07,459 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 246 transitions. [2018-11-23 09:55:07,460 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:07,460 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 246 transitions. [2018-11-23 09:55:07,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2018-11-23 09:55:07,461 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:07,461 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:07,461 INFO L423 AbstractCegarLoop]: === Iteration 5 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:07,461 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:07,461 INFO L82 PathProgramCache]: Analyzing trace with hash -1139669302, now seen corresponding path program 1 times [2018-11-23 09:55:07,462 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:07,462 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:07,463 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,463 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:07,463 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:07,527 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:07,527 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:07,527 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:07,527 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:07,528 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:07,528 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:07,528 INFO L87 Difference]: Start difference. First operand 167 states and 246 transitions. Second operand 4 states. [2018-11-23 09:55:07,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:07,678 INFO L93 Difference]: Finished difference Result 322 states and 475 transitions. [2018-11-23 09:55:07,679 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:07,679 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 65 [2018-11-23 09:55:07,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:07,680 INFO L225 Difference]: With dead ends: 322 [2018-11-23 09:55:07,680 INFO L226 Difference]: Without dead ends: 180 [2018-11-23 09:55:07,680 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:07,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2018-11-23 09:55:07,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 167. [2018-11-23 09:55:07,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 09:55:07,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 245 transitions. [2018-11-23 09:55:07,688 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 245 transitions. Word has length 65 [2018-11-23 09:55:07,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:07,688 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 245 transitions. [2018-11-23 09:55:07,688 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:07,688 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 245 transitions. [2018-11-23 09:55:07,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2018-11-23 09:55:07,689 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:07,689 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:07,689 INFO L423 AbstractCegarLoop]: === Iteration 6 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:07,690 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:07,690 INFO L82 PathProgramCache]: Analyzing trace with hash 1222129443, now seen corresponding path program 1 times [2018-11-23 09:55:07,690 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:07,690 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:07,691 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,691 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:07,691 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:07,740 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:07,741 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:07,741 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:07,741 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:07,741 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:07,741 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:07,742 INFO L87 Difference]: Start difference. First operand 167 states and 245 transitions. Second operand 4 states. [2018-11-23 09:55:07,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:07,877 INFO L93 Difference]: Finished difference Result 322 states and 474 transitions. [2018-11-23 09:55:07,877 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:07,877 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 66 [2018-11-23 09:55:07,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:07,878 INFO L225 Difference]: With dead ends: 322 [2018-11-23 09:55:07,879 INFO L226 Difference]: Without dead ends: 180 [2018-11-23 09:55:07,879 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:07,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2018-11-23 09:55:07,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 167. [2018-11-23 09:55:07,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 09:55:07,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 244 transitions. [2018-11-23 09:55:07,884 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 244 transitions. Word has length 66 [2018-11-23 09:55:07,884 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:07,884 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 244 transitions. [2018-11-23 09:55:07,884 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:07,884 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 244 transitions. [2018-11-23 09:55:07,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2018-11-23 09:55:07,885 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:07,885 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:07,885 INFO L423 AbstractCegarLoop]: === Iteration 7 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:07,885 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:07,885 INFO L82 PathProgramCache]: Analyzing trace with hash 355025414, now seen corresponding path program 1 times [2018-11-23 09:55:07,886 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:07,886 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:07,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,889 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:07,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:07,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:07,953 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:07,954 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:07,954 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:07,954 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:07,954 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:07,954 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:07,954 INFO L87 Difference]: Start difference. First operand 167 states and 244 transitions. Second operand 4 states. [2018-11-23 09:55:08,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:08,101 INFO L93 Difference]: Finished difference Result 322 states and 473 transitions. [2018-11-23 09:55:08,101 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:08,101 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 67 [2018-11-23 09:55:08,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:08,102 INFO L225 Difference]: With dead ends: 322 [2018-11-23 09:55:08,102 INFO L226 Difference]: Without dead ends: 180 [2018-11-23 09:55:08,103 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:08,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2018-11-23 09:55:08,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 167. [2018-11-23 09:55:08,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 167 states. [2018-11-23 09:55:08,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 243 transitions. [2018-11-23 09:55:08,109 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 243 transitions. Word has length 67 [2018-11-23 09:55:08,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:08,109 INFO L480 AbstractCegarLoop]: Abstraction has 167 states and 243 transitions. [2018-11-23 09:55:08,109 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:08,109 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 243 transitions. [2018-11-23 09:55:08,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 09:55:08,110 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:08,110 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:08,110 INFO L423 AbstractCegarLoop]: === Iteration 8 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:08,110 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:08,110 INFO L82 PathProgramCache]: Analyzing trace with hash -1096954691, now seen corresponding path program 1 times [2018-11-23 09:55:08,110 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:08,110 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:08,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,111 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:08,111 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:08,152 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:08,152 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:08,152 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:08,153 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:08,153 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:08,153 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:08,153 INFO L87 Difference]: Start difference. First operand 167 states and 243 transitions. Second operand 4 states. [2018-11-23 09:55:08,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:08,313 INFO L93 Difference]: Finished difference Result 352 states and 521 transitions. [2018-11-23 09:55:08,314 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:08,314 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 09:55:08,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:08,315 INFO L225 Difference]: With dead ends: 352 [2018-11-23 09:55:08,315 INFO L226 Difference]: Without dead ends: 210 [2018-11-23 09:55:08,315 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:08,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2018-11-23 09:55:08,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 189. [2018-11-23 09:55:08,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:08,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 280 transitions. [2018-11-23 09:55:08,320 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 280 transitions. Word has length 68 [2018-11-23 09:55:08,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:08,320 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 280 transitions. [2018-11-23 09:55:08,320 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:08,320 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 280 transitions. [2018-11-23 09:55:08,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 09:55:08,320 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:08,321 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:08,321 INFO L423 AbstractCegarLoop]: === Iteration 9 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:08,321 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:08,321 INFO L82 PathProgramCache]: Analyzing trace with hash -1958096354, now seen corresponding path program 1 times [2018-11-23 09:55:08,321 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:08,321 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:08,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,322 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:08,322 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:08,367 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:08,367 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:08,367 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:08,367 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:08,367 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:08,368 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:08,368 INFO L87 Difference]: Start difference. First operand 189 states and 280 transitions. Second operand 4 states. [2018-11-23 09:55:08,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:08,513 INFO L93 Difference]: Finished difference Result 366 states and 546 transitions. [2018-11-23 09:55:08,513 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:08,513 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 68 [2018-11-23 09:55:08,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:08,514 INFO L225 Difference]: With dead ends: 366 [2018-11-23 09:55:08,514 INFO L226 Difference]: Without dead ends: 202 [2018-11-23 09:55:08,515 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:08,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2018-11-23 09:55:08,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 189. [2018-11-23 09:55:08,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:08,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 279 transitions. [2018-11-23 09:55:08,520 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 279 transitions. Word has length 68 [2018-11-23 09:55:08,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:08,520 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 279 transitions. [2018-11-23 09:55:08,520 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:08,520 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 279 transitions. [2018-11-23 09:55:08,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2018-11-23 09:55:08,521 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:08,521 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:08,521 INFO L423 AbstractCegarLoop]: === Iteration 10 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:08,521 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:08,521 INFO L82 PathProgramCache]: Analyzing trace with hash -1853127775, now seen corresponding path program 1 times [2018-11-23 09:55:08,521 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:08,521 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:08,524 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,524 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:08,525 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:08,560 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:08,561 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:08,561 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:08,561 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:08,561 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:08,561 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:08,561 INFO L87 Difference]: Start difference. First operand 189 states and 279 transitions. Second operand 4 states. [2018-11-23 09:55:08,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:08,705 INFO L93 Difference]: Finished difference Result 356 states and 533 transitions. [2018-11-23 09:55:08,705 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:08,705 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 69 [2018-11-23 09:55:08,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:08,706 INFO L225 Difference]: With dead ends: 356 [2018-11-23 09:55:08,706 INFO L226 Difference]: Without dead ends: 192 [2018-11-23 09:55:08,707 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:08,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2018-11-23 09:55:08,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 189. [2018-11-23 09:55:08,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:08,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 278 transitions. [2018-11-23 09:55:08,714 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 278 transitions. Word has length 69 [2018-11-23 09:55:08,714 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:08,714 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 278 transitions. [2018-11-23 09:55:08,714 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:08,714 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 278 transitions. [2018-11-23 09:55:08,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2018-11-23 09:55:08,715 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:08,715 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:08,715 INFO L423 AbstractCegarLoop]: === Iteration 11 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:08,716 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:08,716 INFO L82 PathProgramCache]: Analyzing trace with hash -1935018135, now seen corresponding path program 1 times [2018-11-23 09:55:08,716 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:08,716 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:08,717 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,717 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:08,717 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:08,767 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:08,767 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:08,768 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:08,768 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:08,768 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:08,768 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:08,768 INFO L87 Difference]: Start difference. First operand 189 states and 278 transitions. Second operand 4 states. [2018-11-23 09:55:08,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:08,962 INFO L93 Difference]: Finished difference Result 374 states and 555 transitions. [2018-11-23 09:55:08,963 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:08,963 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 81 [2018-11-23 09:55:08,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:08,964 INFO L225 Difference]: With dead ends: 374 [2018-11-23 09:55:08,964 INFO L226 Difference]: Without dead ends: 210 [2018-11-23 09:55:08,965 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:08,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2018-11-23 09:55:08,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 189. [2018-11-23 09:55:08,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:08,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 277 transitions. [2018-11-23 09:55:08,971 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 277 transitions. Word has length 81 [2018-11-23 09:55:08,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:08,972 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 277 transitions. [2018-11-23 09:55:08,972 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:08,972 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 277 transitions. [2018-11-23 09:55:08,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 09:55:08,973 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:08,973 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:08,973 INFO L423 AbstractCegarLoop]: === Iteration 12 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:08,973 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:08,973 INFO L82 PathProgramCache]: Analyzing trace with hash 977683494, now seen corresponding path program 1 times [2018-11-23 09:55:08,973 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:08,974 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:08,975 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:08,975 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:08,975 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:09,046 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:09,046 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:09,046 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:09,046 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:09,047 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:09,047 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,047 INFO L87 Difference]: Start difference. First operand 189 states and 277 transitions. Second operand 4 states. [2018-11-23 09:55:09,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:09,197 INFO L93 Difference]: Finished difference Result 372 states and 551 transitions. [2018-11-23 09:55:09,197 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:09,197 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 09:55:09,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:09,198 INFO L225 Difference]: With dead ends: 372 [2018-11-23 09:55:09,198 INFO L226 Difference]: Without dead ends: 208 [2018-11-23 09:55:09,199 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:09,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2018-11-23 09:55:09,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 189. [2018-11-23 09:55:09,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:09,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 276 transitions. [2018-11-23 09:55:09,204 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 276 transitions. Word has length 82 [2018-11-23 09:55:09,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:09,204 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 276 transitions. [2018-11-23 09:55:09,204 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:09,204 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 276 transitions. [2018-11-23 09:55:09,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2018-11-23 09:55:09,205 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:09,205 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:09,205 INFO L423 AbstractCegarLoop]: === Iteration 13 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:09,205 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:09,205 INFO L82 PathProgramCache]: Analyzing trace with hash 1478335015, now seen corresponding path program 1 times [2018-11-23 09:55:09,205 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:09,206 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:09,206 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,206 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:09,207 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:09,236 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:09,236 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:09,236 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:09,237 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:09,237 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:09,237 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,237 INFO L87 Difference]: Start difference. First operand 189 states and 276 transitions. Second operand 4 states. [2018-11-23 09:55:09,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:09,397 INFO L93 Difference]: Finished difference Result 371 states and 548 transitions. [2018-11-23 09:55:09,397 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:09,397 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 82 [2018-11-23 09:55:09,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:09,398 INFO L225 Difference]: With dead ends: 371 [2018-11-23 09:55:09,398 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 09:55:09,399 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:09,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 09:55:09,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 189. [2018-11-23 09:55:09,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:09,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 275 transitions. [2018-11-23 09:55:09,405 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 275 transitions. Word has length 82 [2018-11-23 09:55:09,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:09,405 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 275 transitions. [2018-11-23 09:55:09,405 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:09,405 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 275 transitions. [2018-11-23 09:55:09,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2018-11-23 09:55:09,406 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:09,406 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:09,406 INFO L423 AbstractCegarLoop]: === Iteration 14 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:09,407 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:09,407 INFO L82 PathProgramCache]: Analyzing trace with hash 775884646, now seen corresponding path program 1 times [2018-11-23 09:55:09,407 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:09,407 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:09,408 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,408 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:09,408 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:09,462 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:09,462 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:09,463 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:09,463 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:09,463 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:09,463 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,463 INFO L87 Difference]: Start difference. First operand 189 states and 275 transitions. Second operand 4 states. [2018-11-23 09:55:09,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:09,668 INFO L93 Difference]: Finished difference Result 371 states and 546 transitions. [2018-11-23 09:55:09,669 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:09,669 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 83 [2018-11-23 09:55:09,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:09,670 INFO L225 Difference]: With dead ends: 371 [2018-11-23 09:55:09,670 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 09:55:09,670 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 09:55:09,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 189. [2018-11-23 09:55:09,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:09,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 274 transitions. [2018-11-23 09:55:09,678 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 274 transitions. Word has length 83 [2018-11-23 09:55:09,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:09,678 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 274 transitions. [2018-11-23 09:55:09,678 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:09,678 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 274 transitions. [2018-11-23 09:55:09,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2018-11-23 09:55:09,679 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:09,679 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:09,679 INFO L423 AbstractCegarLoop]: === Iteration 15 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:09,679 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:09,680 INFO L82 PathProgramCache]: Analyzing trace with hash -593661405, now seen corresponding path program 1 times [2018-11-23 09:55:09,680 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:09,680 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:09,680 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,681 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:09,681 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:09,742 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:09,742 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:09,742 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:09,743 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:09,743 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:09,743 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,743 INFO L87 Difference]: Start difference. First operand 189 states and 274 transitions. Second operand 4 states. [2018-11-23 09:55:09,908 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:09,908 INFO L93 Difference]: Finished difference Result 371 states and 544 transitions. [2018-11-23 09:55:09,909 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:09,909 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 84 [2018-11-23 09:55:09,909 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:09,910 INFO L225 Difference]: With dead ends: 371 [2018-11-23 09:55:09,910 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 09:55:09,910 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 09:55:09,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 189. [2018-11-23 09:55:09,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:09,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 273 transitions. [2018-11-23 09:55:09,916 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 273 transitions. Word has length 84 [2018-11-23 09:55:09,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:09,916 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 273 transitions. [2018-11-23 09:55:09,916 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:09,916 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 273 transitions. [2018-11-23 09:55:09,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2018-11-23 09:55:09,917 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:09,917 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:09,917 INFO L423 AbstractCegarLoop]: === Iteration 16 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:09,917 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:09,918 INFO L82 PathProgramCache]: Analyzing trace with hash -1302616671, now seen corresponding path program 1 times [2018-11-23 09:55:09,918 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:09,918 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:09,919 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,919 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:09,919 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:09,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:09,948 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:09,948 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:09,948 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:09,949 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:09,949 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:09,949 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:09,949 INFO L87 Difference]: Start difference. First operand 189 states and 273 transitions. Second operand 4 states. [2018-11-23 09:55:10,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:10,098 INFO L93 Difference]: Finished difference Result 371 states and 542 transitions. [2018-11-23 09:55:10,099 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:10,099 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 85 [2018-11-23 09:55:10,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:10,100 INFO L225 Difference]: With dead ends: 371 [2018-11-23 09:55:10,100 INFO L226 Difference]: Without dead ends: 207 [2018-11-23 09:55:10,100 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:10,101 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2018-11-23 09:55:10,104 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 189. [2018-11-23 09:55:10,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:10,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 272 transitions. [2018-11-23 09:55:10,105 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 272 transitions. Word has length 85 [2018-11-23 09:55:10,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:10,106 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 272 transitions. [2018-11-23 09:55:10,106 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:10,106 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 272 transitions. [2018-11-23 09:55:10,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2018-11-23 09:55:10,106 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:10,107 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:10,107 INFO L423 AbstractCegarLoop]: === Iteration 17 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:10,107 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:10,107 INFO L82 PathProgramCache]: Analyzing trace with hash 1286873214, now seen corresponding path program 1 times [2018-11-23 09:55:10,107 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:10,107 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:10,108 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,108 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:10,108 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:10,158 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:10,159 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:10,159 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:10,159 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:10,159 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:10,159 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:10,159 INFO L87 Difference]: Start difference. First operand 189 states and 272 transitions. Second operand 4 states. [2018-11-23 09:55:10,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:10,297 INFO L93 Difference]: Finished difference Result 361 states and 528 transitions. [2018-11-23 09:55:10,298 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:10,298 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 86 [2018-11-23 09:55:10,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:10,299 INFO L225 Difference]: With dead ends: 361 [2018-11-23 09:55:10,299 INFO L226 Difference]: Without dead ends: 197 [2018-11-23 09:55:10,300 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 4 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:10,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2018-11-23 09:55:10,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 189. [2018-11-23 09:55:10,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 189 states. [2018-11-23 09:55:10,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 271 transitions. [2018-11-23 09:55:10,305 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 271 transitions. Word has length 86 [2018-11-23 09:55:10,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:10,305 INFO L480 AbstractCegarLoop]: Abstraction has 189 states and 271 transitions. [2018-11-23 09:55:10,305 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:10,305 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 271 transitions. [2018-11-23 09:55:10,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 09:55:10,306 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:10,306 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:10,306 INFO L423 AbstractCegarLoop]: === Iteration 18 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:10,306 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:10,306 INFO L82 PathProgramCache]: Analyzing trace with hash -1223775727, now seen corresponding path program 1 times [2018-11-23 09:55:10,306 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:10,306 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:10,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,307 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:10,307 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:10,353 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:10,353 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:10,354 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:10,354 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:10,354 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:10,354 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:10,354 INFO L87 Difference]: Start difference. First operand 189 states and 271 transitions. Second operand 4 states. [2018-11-23 09:55:10,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:10,593 INFO L93 Difference]: Finished difference Result 448 states and 660 transitions. [2018-11-23 09:55:10,594 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:10,594 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 09:55:10,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:10,595 INFO L225 Difference]: With dead ends: 448 [2018-11-23 09:55:10,595 INFO L226 Difference]: Without dead ends: 284 [2018-11-23 09:55:10,596 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:10,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2018-11-23 09:55:10,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 232. [2018-11-23 09:55:10,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 232 states. [2018-11-23 09:55:10,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 348 transitions. [2018-11-23 09:55:10,602 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 348 transitions. Word has length 90 [2018-11-23 09:55:10,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:10,603 INFO L480 AbstractCegarLoop]: Abstraction has 232 states and 348 transitions. [2018-11-23 09:55:10,603 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:10,603 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 348 transitions. [2018-11-23 09:55:10,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 09:55:10,604 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:10,604 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:10,604 INFO L423 AbstractCegarLoop]: === Iteration 19 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:10,604 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:10,605 INFO L82 PathProgramCache]: Analyzing trace with hash -2121169005, now seen corresponding path program 1 times [2018-11-23 09:55:10,605 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:10,605 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:10,606 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,606 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:10,606 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:10,656 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:10,656 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:10,656 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:10,657 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:10,657 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:10,657 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:10,657 INFO L87 Difference]: Start difference. First operand 232 states and 348 transitions. Second operand 4 states. [2018-11-23 09:55:10,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:10,877 INFO L93 Difference]: Finished difference Result 488 states and 742 transitions. [2018-11-23 09:55:10,878 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:10,878 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 90 [2018-11-23 09:55:10,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:10,879 INFO L225 Difference]: With dead ends: 488 [2018-11-23 09:55:10,879 INFO L226 Difference]: Without dead ends: 281 [2018-11-23 09:55:10,880 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:10,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 281 states. [2018-11-23 09:55:10,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 281 to 256. [2018-11-23 09:55:10,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:10,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 389 transitions. [2018-11-23 09:55:10,886 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 389 transitions. Word has length 90 [2018-11-23 09:55:10,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:10,887 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 389 transitions. [2018-11-23 09:55:10,887 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:10,887 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 389 transitions. [2018-11-23 09:55:10,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 09:55:10,888 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:10,888 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:10,888 INFO L423 AbstractCegarLoop]: === Iteration 20 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:10,888 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:10,888 INFO L82 PathProgramCache]: Analyzing trace with hash 1578001045, now seen corresponding path program 1 times [2018-11-23 09:55:10,889 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:10,889 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:10,889 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,889 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:10,890 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:10,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:10,927 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:10,928 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:10,928 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:10,928 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:10,928 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:10,928 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:10,929 INFO L87 Difference]: Start difference. First operand 256 states and 389 transitions. Second operand 4 states. [2018-11-23 09:55:11,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:11,163 INFO L93 Difference]: Finished difference Result 539 states and 818 transitions. [2018-11-23 09:55:11,164 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:11,164 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 09:55:11,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:11,165 INFO L225 Difference]: With dead ends: 539 [2018-11-23 09:55:11,165 INFO L226 Difference]: Without dead ends: 308 [2018-11-23 09:55:11,166 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:11,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2018-11-23 09:55:11,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 256. [2018-11-23 09:55:11,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:11,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 388 transitions. [2018-11-23 09:55:11,172 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 388 transitions. Word has length 103 [2018-11-23 09:55:11,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:11,173 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 388 transitions. [2018-11-23 09:55:11,173 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:11,173 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 388 transitions. [2018-11-23 09:55:11,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2018-11-23 09:55:11,174 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:11,174 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:11,174 INFO L423 AbstractCegarLoop]: === Iteration 21 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:11,174 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:11,174 INFO L82 PathProgramCache]: Analyzing trace with hash 1618675795, now seen corresponding path program 1 times [2018-11-23 09:55:11,174 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:11,174 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:11,175 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,175 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:11,175 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:11,222 INFO L134 CoverageAnalysis]: Checked inductivity of 69 backedges. 58 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:11,223 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:11,223 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:11,223 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:11,223 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:11,223 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:11,223 INFO L87 Difference]: Start difference. First operand 256 states and 388 transitions. Second operand 4 states. [2018-11-23 09:55:11,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:11,398 INFO L93 Difference]: Finished difference Result 512 states and 780 transitions. [2018-11-23 09:55:11,398 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:11,398 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 103 [2018-11-23 09:55:11,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:11,399 INFO L225 Difference]: With dead ends: 512 [2018-11-23 09:55:11,399 INFO L226 Difference]: Without dead ends: 281 [2018-11-23 09:55:11,400 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:11,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 281 states. [2018-11-23 09:55:11,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 281 to 256. [2018-11-23 09:55:11,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:11,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 387 transitions. [2018-11-23 09:55:11,407 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 387 transitions. Word has length 103 [2018-11-23 09:55:11,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:11,407 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 387 transitions. [2018-11-23 09:55:11,408 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:11,408 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 387 transitions. [2018-11-23 09:55:11,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 09:55:11,409 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:11,409 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:11,409 INFO L423 AbstractCegarLoop]: === Iteration 22 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:11,409 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:11,409 INFO L82 PathProgramCache]: Analyzing trace with hash -1787871622, now seen corresponding path program 1 times [2018-11-23 09:55:11,409 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:11,409 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:11,410 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,410 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:11,410 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:11,449 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:11,449 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:11,449 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:11,449 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:11,449 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:11,449 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:11,450 INFO L87 Difference]: Start difference. First operand 256 states and 387 transitions. Second operand 4 states. [2018-11-23 09:55:11,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:11,677 INFO L93 Difference]: Finished difference Result 537 states and 812 transitions. [2018-11-23 09:55:11,678 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:11,678 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 09:55:11,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:11,679 INFO L225 Difference]: With dead ends: 537 [2018-11-23 09:55:11,679 INFO L226 Difference]: Without dead ends: 306 [2018-11-23 09:55:11,680 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:11,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2018-11-23 09:55:11,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 256. [2018-11-23 09:55:11,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:11,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 386 transitions. [2018-11-23 09:55:11,686 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 386 transitions. Word has length 104 [2018-11-23 09:55:11,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:11,686 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 386 transitions. [2018-11-23 09:55:11,687 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:11,687 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 386 transitions. [2018-11-23 09:55:11,687 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 09:55:11,687 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:11,688 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:11,688 INFO L423 AbstractCegarLoop]: === Iteration 23 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:11,688 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:11,688 INFO L82 PathProgramCache]: Analyzing trace with hash -1287220101, now seen corresponding path program 1 times [2018-11-23 09:55:11,688 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:11,688 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:11,689 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,689 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:11,689 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:11,725 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:11,725 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:11,725 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:11,725 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:11,725 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:11,726 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:11,726 INFO L87 Difference]: Start difference. First operand 256 states and 386 transitions. Second operand 4 states. [2018-11-23 09:55:11,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:11,942 INFO L93 Difference]: Finished difference Result 536 states and 809 transitions. [2018-11-23 09:55:11,943 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:11,943 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 09:55:11,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:11,944 INFO L225 Difference]: With dead ends: 536 [2018-11-23 09:55:11,944 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:55:11,944 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:11,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:55:11,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 256. [2018-11-23 09:55:11,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:11,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 385 transitions. [2018-11-23 09:55:11,952 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 385 transitions. Word has length 104 [2018-11-23 09:55:11,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:11,952 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 385 transitions. [2018-11-23 09:55:11,953 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:11,953 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 385 transitions. [2018-11-23 09:55:11,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 09:55:11,954 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:11,954 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:11,954 INFO L423 AbstractCegarLoop]: === Iteration 24 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:11,954 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:11,954 INFO L82 PathProgramCache]: Analyzing trace with hash -526954372, now seen corresponding path program 1 times [2018-11-23 09:55:11,954 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:11,954 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:11,955 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,955 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:11,955 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:11,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:11,990 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:11,990 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:11,991 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:11,991 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:11,991 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:11,991 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:11,991 INFO L87 Difference]: Start difference. First operand 256 states and 385 transitions. Second operand 4 states. [2018-11-23 09:55:12,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:12,152 INFO L93 Difference]: Finished difference Result 510 states and 772 transitions. [2018-11-23 09:55:12,153 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:12,154 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 09:55:12,154 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:12,155 INFO L225 Difference]: With dead ends: 510 [2018-11-23 09:55:12,155 INFO L226 Difference]: Without dead ends: 279 [2018-11-23 09:55:12,155 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:12,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2018-11-23 09:55:12,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 256. [2018-11-23 09:55:12,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:12,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 384 transitions. [2018-11-23 09:55:12,162 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 384 transitions. Word has length 104 [2018-11-23 09:55:12,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:12,162 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 384 transitions. [2018-11-23 09:55:12,162 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:12,162 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 384 transitions. [2018-11-23 09:55:12,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2018-11-23 09:55:12,163 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:12,163 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:12,164 INFO L423 AbstractCegarLoop]: === Iteration 25 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:12,164 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:12,164 INFO L82 PathProgramCache]: Analyzing trace with hash -26302851, now seen corresponding path program 1 times [2018-11-23 09:55:12,164 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:12,164 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:12,165 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:12,165 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:12,165 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:12,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:12,200 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:12,200 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:12,200 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:12,201 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:12,201 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:12,201 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:12,201 INFO L87 Difference]: Start difference. First operand 256 states and 384 transitions. Second operand 4 states. [2018-11-23 09:55:12,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:12,365 INFO L93 Difference]: Finished difference Result 509 states and 769 transitions. [2018-11-23 09:55:12,366 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:12,366 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 104 [2018-11-23 09:55:12,366 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:12,367 INFO L225 Difference]: With dead ends: 509 [2018-11-23 09:55:12,367 INFO L226 Difference]: Without dead ends: 278 [2018-11-23 09:55:12,368 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:12,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2018-11-23 09:55:12,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 256. [2018-11-23 09:55:12,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:12,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 383 transitions. [2018-11-23 09:55:12,376 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 383 transitions. Word has length 104 [2018-11-23 09:55:12,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:12,376 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 383 transitions. [2018-11-23 09:55:12,376 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:12,376 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 383 transitions. [2018-11-23 09:55:12,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2018-11-23 09:55:12,377 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:12,377 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:12,378 INFO L423 AbstractCegarLoop]: === Iteration 26 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:12,378 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:12,378 INFO L82 PathProgramCache]: Analyzing trace with hash 943021970, now seen corresponding path program 1 times [2018-11-23 09:55:12,378 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:12,378 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:12,379 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:12,379 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:12,379 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:12,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:12,444 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:12,445 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:12,445 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:12,445 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:12,445 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:12,445 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:12,446 INFO L87 Difference]: Start difference. First operand 256 states and 383 transitions. Second operand 4 states. [2018-11-23 09:55:12,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:12,803 INFO L93 Difference]: Finished difference Result 536 states and 803 transitions. [2018-11-23 09:55:12,806 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:12,806 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 105 [2018-11-23 09:55:12,807 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:12,808 INFO L225 Difference]: With dead ends: 536 [2018-11-23 09:55:12,808 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:55:12,808 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:12,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:55:12,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 256. [2018-11-23 09:55:12,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:12,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 382 transitions. [2018-11-23 09:55:12,816 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 382 transitions. Word has length 105 [2018-11-23 09:55:12,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:12,816 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 382 transitions. [2018-11-23 09:55:12,816 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:12,816 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 382 transitions. [2018-11-23 09:55:12,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2018-11-23 09:55:12,816 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:12,817 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:12,817 INFO L423 AbstractCegarLoop]: === Iteration 27 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:12,817 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:12,817 INFO L82 PathProgramCache]: Analyzing trace with hash 1376751056, now seen corresponding path program 1 times [2018-11-23 09:55:12,817 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:12,817 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:12,818 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:12,818 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:12,818 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:12,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:12,848 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:12,848 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:12,849 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:12,849 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:12,849 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:12,849 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:12,849 INFO L87 Difference]: Start difference. First operand 256 states and 382 transitions. Second operand 4 states. [2018-11-23 09:55:13,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:13,011 INFO L93 Difference]: Finished difference Result 509 states and 765 transitions. [2018-11-23 09:55:13,011 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:13,012 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 105 [2018-11-23 09:55:13,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:13,013 INFO L225 Difference]: With dead ends: 509 [2018-11-23 09:55:13,013 INFO L226 Difference]: Without dead ends: 278 [2018-11-23 09:55:13,013 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:13,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2018-11-23 09:55:13,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 256. [2018-11-23 09:55:13,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:13,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 381 transitions. [2018-11-23 09:55:13,021 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 381 transitions. Word has length 105 [2018-11-23 09:55:13,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:13,021 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 381 transitions. [2018-11-23 09:55:13,021 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:13,021 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 381 transitions. [2018-11-23 09:55:13,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 09:55:13,022 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:13,022 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:13,022 INFO L423 AbstractCegarLoop]: === Iteration 28 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:13,022 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:13,022 INFO L82 PathProgramCache]: Analyzing trace with hash 292628343, now seen corresponding path program 1 times [2018-11-23 09:55:13,022 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:13,022 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:13,023 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,023 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:13,023 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:13,058 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:13,058 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:13,058 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:13,058 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:13,058 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:13,058 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:13,059 INFO L87 Difference]: Start difference. First operand 256 states and 381 transitions. Second operand 4 states. [2018-11-23 09:55:13,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:13,275 INFO L93 Difference]: Finished difference Result 536 states and 799 transitions. [2018-11-23 09:55:13,276 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:13,276 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 09:55:13,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:13,276 INFO L225 Difference]: With dead ends: 536 [2018-11-23 09:55:13,276 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:55:13,277 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:13,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:55:13,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 256. [2018-11-23 09:55:13,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:13,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 380 transitions. [2018-11-23 09:55:13,288 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 380 transitions. Word has length 106 [2018-11-23 09:55:13,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:13,289 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 380 transitions. [2018-11-23 09:55:13,289 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:13,289 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 380 transitions. [2018-11-23 09:55:13,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2018-11-23 09:55:13,290 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:13,290 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:13,290 INFO L423 AbstractCegarLoop]: === Iteration 29 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:13,290 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:13,290 INFO L82 PathProgramCache]: Analyzing trace with hash 853328121, now seen corresponding path program 1 times [2018-11-23 09:55:13,290 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:13,290 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:13,291 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,291 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:13,291 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:13,356 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:13,356 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:13,356 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:13,356 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:13,356 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:13,356 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:13,357 INFO L87 Difference]: Start difference. First operand 256 states and 380 transitions. Second operand 4 states. [2018-11-23 09:55:13,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:13,586 INFO L93 Difference]: Finished difference Result 509 states and 761 transitions. [2018-11-23 09:55:13,587 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:13,587 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 106 [2018-11-23 09:55:13,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:13,588 INFO L225 Difference]: With dead ends: 509 [2018-11-23 09:55:13,588 INFO L226 Difference]: Without dead ends: 278 [2018-11-23 09:55:13,589 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:13,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2018-11-23 09:55:13,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 256. [2018-11-23 09:55:13,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:13,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 379 transitions. [2018-11-23 09:55:13,601 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 379 transitions. Word has length 106 [2018-11-23 09:55:13,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:13,601 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 379 transitions. [2018-11-23 09:55:13,601 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:13,601 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 379 transitions. [2018-11-23 09:55:13,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 09:55:13,602 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:13,602 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:13,602 INFO L423 AbstractCegarLoop]: === Iteration 30 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:13,603 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:13,603 INFO L82 PathProgramCache]: Analyzing trace with hash 402561741, now seen corresponding path program 1 times [2018-11-23 09:55:13,603 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:13,603 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:13,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,604 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:13,604 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:13,663 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:13,663 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:13,663 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:13,663 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:13,663 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:13,663 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:13,664 INFO L87 Difference]: Start difference. First operand 256 states and 379 transitions. Second operand 4 states. [2018-11-23 09:55:13,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:13,987 INFO L93 Difference]: Finished difference Result 536 states and 795 transitions. [2018-11-23 09:55:13,987 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:13,987 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 09:55:13,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:13,988 INFO L225 Difference]: With dead ends: 536 [2018-11-23 09:55:13,988 INFO L226 Difference]: Without dead ends: 305 [2018-11-23 09:55:13,989 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:13,989 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2018-11-23 09:55:13,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 256. [2018-11-23 09:55:13,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:13,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 378 transitions. [2018-11-23 09:55:13,996 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 378 transitions. Word has length 107 [2018-11-23 09:55:13,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:13,996 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 378 transitions. [2018-11-23 09:55:13,997 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:13,997 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 378 transitions. [2018-11-23 09:55:13,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2018-11-23 09:55:13,997 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:13,997 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:13,998 INFO L423 AbstractCegarLoop]: === Iteration 31 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:13,998 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:13,998 INFO L82 PathProgramCache]: Analyzing trace with hash 604385675, now seen corresponding path program 1 times [2018-11-23 09:55:13,998 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:13,998 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:13,999 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:13,999 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:13,999 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:14,034 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 52 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:14,034 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:14,034 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:14,035 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:14,035 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:14,035 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:14,035 INFO L87 Difference]: Start difference. First operand 256 states and 378 transitions. Second operand 4 states. [2018-11-23 09:55:14,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:14,196 INFO L93 Difference]: Finished difference Result 509 states and 757 transitions. [2018-11-23 09:55:14,196 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:14,196 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 107 [2018-11-23 09:55:14,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:14,197 INFO L225 Difference]: With dead ends: 509 [2018-11-23 09:55:14,198 INFO L226 Difference]: Without dead ends: 278 [2018-11-23 09:55:14,198 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:14,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2018-11-23 09:55:14,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 256. [2018-11-23 09:55:14,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:14,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 377 transitions. [2018-11-23 09:55:14,206 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 377 transitions. Word has length 107 [2018-11-23 09:55:14,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:14,206 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 377 transitions. [2018-11-23 09:55:14,206 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:14,206 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 377 transitions. [2018-11-23 09:55:14,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 09:55:14,207 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:14,207 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:14,207 INFO L423 AbstractCegarLoop]: === Iteration 32 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:14,207 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:14,207 INFO L82 PathProgramCache]: Analyzing trace with hash -1687170862, now seen corresponding path program 1 times [2018-11-23 09:55:14,207 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:14,207 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:14,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,208 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:14,208 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:14,246 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:14,246 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:14,246 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:14,247 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:14,247 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:14,247 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:14,247 INFO L87 Difference]: Start difference. First operand 256 states and 377 transitions. Second operand 4 states. [2018-11-23 09:55:14,458 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:14,458 INFO L93 Difference]: Finished difference Result 526 states and 779 transitions. [2018-11-23 09:55:14,459 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:14,459 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 09:55:14,459 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:14,460 INFO L225 Difference]: With dead ends: 526 [2018-11-23 09:55:14,460 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 09:55:14,461 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:14,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 09:55:14,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 256. [2018-11-23 09:55:14,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:14,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 376 transitions. [2018-11-23 09:55:14,469 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 376 transitions. Word has length 108 [2018-11-23 09:55:14,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:14,469 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 376 transitions. [2018-11-23 09:55:14,469 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:14,469 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 376 transitions. [2018-11-23 09:55:14,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2018-11-23 09:55:14,470 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:14,470 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:14,470 INFO L423 AbstractCegarLoop]: === Iteration 33 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:14,470 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:14,470 INFO L82 PathProgramCache]: Analyzing trace with hash 274403796, now seen corresponding path program 1 times [2018-11-23 09:55:14,470 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:14,470 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:14,471 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,471 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:14,471 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:14,512 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 55 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:14,512 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:14,512 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:14,512 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:14,513 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:14,513 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:14,513 INFO L87 Difference]: Start difference. First operand 256 states and 376 transitions. Second operand 4 states. [2018-11-23 09:55:14,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:14,678 INFO L93 Difference]: Finished difference Result 499 states and 741 transitions. [2018-11-23 09:55:14,679 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:14,679 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 108 [2018-11-23 09:55:14,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:14,680 INFO L225 Difference]: With dead ends: 499 [2018-11-23 09:55:14,680 INFO L226 Difference]: Without dead ends: 268 [2018-11-23 09:55:14,680 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:14,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2018-11-23 09:55:14,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 256. [2018-11-23 09:55:14,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:14,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 375 transitions. [2018-11-23 09:55:14,688 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 375 transitions. Word has length 108 [2018-11-23 09:55:14,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:14,688 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 375 transitions. [2018-11-23 09:55:14,688 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:14,688 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 375 transitions. [2018-11-23 09:55:14,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 09:55:14,689 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:14,689 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:14,689 INFO L423 AbstractCegarLoop]: === Iteration 34 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:14,689 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:14,689 INFO L82 PathProgramCache]: Analyzing trace with hash 1474488057, now seen corresponding path program 1 times [2018-11-23 09:55:14,689 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:14,690 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:14,690 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,690 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:14,690 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:14,741 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 75 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:14,741 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:14,741 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-23 09:55:14,741 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2018-11-23 09:55:14,741 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-23 09:55:14,741 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-23 09:55:14,742 INFO L87 Difference]: Start difference. First operand 256 states and 375 transitions. Second operand 4 states. [2018-11-23 09:55:14,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:14,948 INFO L93 Difference]: Finished difference Result 526 states and 775 transitions. [2018-11-23 09:55:14,948 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2018-11-23 09:55:14,948 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 112 [2018-11-23 09:55:14,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:14,949 INFO L225 Difference]: With dead ends: 526 [2018-11-23 09:55:14,950 INFO L226 Difference]: Without dead ends: 295 [2018-11-23 09:55:14,950 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 2 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2018-11-23 09:55:14,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2018-11-23 09:55:14,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 256. [2018-11-23 09:55:14,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 256 states. [2018-11-23 09:55:14,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 374 transitions. [2018-11-23 09:55:14,958 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 374 transitions. Word has length 112 [2018-11-23 09:55:14,958 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:14,958 INFO L480 AbstractCegarLoop]: Abstraction has 256 states and 374 transitions. [2018-11-23 09:55:14,958 INFO L481 AbstractCegarLoop]: Interpolant automaton has 4 states. [2018-11-23 09:55:14,958 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 374 transitions. [2018-11-23 09:55:14,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2018-11-23 09:55:14,959 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:14,959 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:14,959 INFO L423 AbstractCegarLoop]: === Iteration 35 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:14,959 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:14,959 INFO L82 PathProgramCache]: Analyzing trace with hash -211691781, now seen corresponding path program 1 times [2018-11-23 09:55:14,959 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:14,959 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:14,960 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,960 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:14,960 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:14,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:14,991 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 56 proven. 0 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2018-11-23 09:55:14,992 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:14,992 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:55:14,992 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:55:14,992 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:55:14,992 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:14,992 INFO L87 Difference]: Start difference. First operand 256 states and 374 transitions. Second operand 3 states. [2018-11-23 09:55:15,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:15,018 INFO L93 Difference]: Finished difference Result 716 states and 1065 transitions. [2018-11-23 09:55:15,019 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:55:15,019 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 112 [2018-11-23 09:55:15,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:15,020 INFO L225 Difference]: With dead ends: 716 [2018-11-23 09:55:15,020 INFO L226 Difference]: Without dead ends: 485 [2018-11-23 09:55:15,021 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:15,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 485 states. [2018-11-23 09:55:15,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 485 to 485. [2018-11-23 09:55:15,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 485 states. [2018-11-23 09:55:15,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 485 states to 485 states and 717 transitions. [2018-11-23 09:55:15,035 INFO L78 Accepts]: Start accepts. Automaton has 485 states and 717 transitions. Word has length 112 [2018-11-23 09:55:15,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:15,035 INFO L480 AbstractCegarLoop]: Abstraction has 485 states and 717 transitions. [2018-11-23 09:55:15,035 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:55:15,035 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 717 transitions. [2018-11-23 09:55:15,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 09:55:15,036 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:15,037 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:15,037 INFO L423 AbstractCegarLoop]: === Iteration 36 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:15,037 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:15,037 INFO L82 PathProgramCache]: Analyzing trace with hash -187977106, now seen corresponding path program 1 times [2018-11-23 09:55:15,037 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-23 09:55:15,037 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-23 09:55:15,038 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:15,038 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:15,038 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-23 09:55:15,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 09:55:15,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 09:55:15,149 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=24604, |#NULL.offset|=24595, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24595, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24586, |old(~init~0)|=24607, |~#SSLv3_server_data~0.base|=24588, |~#SSLv3_server_data~0.offset|=24586, ~init~0=24607] [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~init~0 := 1;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100);call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4);call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24595, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24586, |old(~init~0)|=24607, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume true; VAL [|#NULL.base|=0, |#NULL.offset|=0, |old(#NULL.base)|=24604, |old(#NULL.offset)|=24595, |old(~#SSLv3_server_data~0.base)|=24588, |old(~#SSLv3_server_data~0.offset)|=24586, |old(~init~0)|=24607, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] RET #604#return; VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=0, |#NULL.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4);call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [main_~s~0.base=24596, main_~s~0.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |main_#t~malloc3.base|=24596, |main_#t~malloc3.offset|=0, |main_#t~malloc4.base|=24603, |main_#t~malloc4.offset|=0, |main_#t~malloc5.base|=24609, |main_#t~malloc5.offset|=0, |main_#t~malloc6.base|=24578, |main_#t~malloc6.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0;assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647;call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4);havoc #t~nondet17;call write~int(8464, ~s.base, 52 + ~s.offset, 4);assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647;~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0, 0;~ret~0 := -1;~skip~0 := 0;~got_new_session~0 := 0;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=0, ssl3_accept_~cb~0.offset=0, ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem19.base|=2, |ssl3_accept_#t~mem19.offset|=(- 1), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296;havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4);call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem22.base|=3, |ssl3_accept_#t~mem22.offset|=(- 2), |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296);havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8464, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8464 == #t~mem32;havoc #t~mem32; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=(- 1), ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 48 + ~s.offset, 4);assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647;~ret~0 := #t~nondet69;havoc #t~nondet69; VAL [ssl3_accept_~blastFlag~0=0, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 == ~blastFlag~0;~blastFlag~0 := 1; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=0, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);~got_new_session~0 := 1;call write~int(8496, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24603, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24598, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8464, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8496, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8496 == #t~mem35;havoc #t~mem35; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647;~ret~0 := #t~nondet70;havoc #t~nondet70; VAL [ssl3_accept_~blastFlag~0=1, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 1 == ~blastFlag~0;~blastFlag~0 := 2; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem71|=1, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 0 != #t~mem71;havoc #t~mem71;call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24603, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24598, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8496, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem52|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem53|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem54|=8656, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8656 == #t~mem54;havoc #t~mem54; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4);havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem119.base, #t~mem119.offset; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___9~0);assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647;~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=2, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 2 == ~blastFlag~0;~blastFlag~0 := 3; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(~ret~0 <= 0);call write~int(8672, ~s.base, 52 + ~s.offset, 4);call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4);call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem127.base|=24603, |ssl3_accept_#t~mem127.offset|=0, |ssl3_accept_#t~mem128|=24598, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(0 == #t~mem128);havoc #t~mem128;havoc #t~mem127.base, #t~mem127.offset; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] ~skip~0 := 0; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8656, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem24|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(12292 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem25|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(16384 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem26|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8192 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem27|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(24576 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem28|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8195 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem29|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8480 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem30|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8481 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem31|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8482 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem32|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8464 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem33|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8465 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem34|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8466 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem35|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8496 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem36|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8497 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem37|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8512 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem38|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8513 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem39|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8528 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem40|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8529 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem41|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8544 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem42|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8545 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem43|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8560 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem44|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8561 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem45|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8448 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem46|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8576 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem47|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8577 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem48|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8592 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem49|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8593 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem50|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8608 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem51|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8609 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem52|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8640 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem53|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8641 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem54|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8656 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem55|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !(8657 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |ssl3_accept_#t~mem56|=8672, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 8672 == #t~mem56;havoc #t~mem56; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=1, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647;~ret~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume 3 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=3, ssl3_accept_~cb~0.base=2, ssl3_accept_~cb~0.offset=(- 1), ssl3_accept_~got_new_session~0=1, ssl3_accept_~ret~0=0, ssl3_accept_~s.base=24596, ssl3_accept_~s.offset=0, ssl3_accept_~skip~0=0, ssl3_accept_~state~0=8672, ssl3_accept_~Time~0=0, ssl3_accept_~tmp___10~0=1, ssl3_accept_~tmp___1~0=0, ssl3_accept_~tmp___2~0=0, ssl3_accept_~tmp___3~0=0, ssl3_accept_~tmp___4~0=0, ssl3_accept_~tmp___5~0=0, ssl3_accept_~tmp___6~0=0, ssl3_accept_~tmp___8~0=0, ssl3_accept_~tmp___9~0=1, ssl3_accept_~tmp~3=0, |#NULL.base|=0, |#NULL.offset|=0, |ssl3_accept_#in~s.base|=24596, |ssl3_accept_#in~s.offset|=0, |~#SSLv3_server_data~0.base|=24587, |~#SSLv3_server_data~0.offset|=0, ~init~0=1] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24595, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24586, ~init~0=24607] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24596, #t~malloc3.offset=0, #t~malloc4.base=24603, #t~malloc4.offset=0, #t~malloc5.base=24609, #t~malloc5.offset=0, #t~malloc6.base=24578, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24596, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1704] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] havoc ~buf~0.base, ~buf~0.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342-L1350] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1351-L1355] assume !(~ret~0 <= 0); [L1356] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1356-L1360] assume 0 != #t~mem71; [L1356] havoc #t~mem71; [L1357] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1361] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume 8656 == #t~mem54; [L1229] havoc #t~mem54; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1554] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1554] call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4); [L1554] call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4); [L1554] havoc #t~mem117.base, #t~mem117.offset; [L1554] havoc #t~mem118.base, #t~mem118.offset; [L1554] havoc #t~mem119.base, #t~mem119.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1555-L1560] assume !(0 == ~tmp___9~0); [L1561] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1562-L1566] assume 2 == ~blastFlag~0; [L1563] ~blastFlag~0 := 3; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567-L1571] assume !(~ret~0 <= 0); [L1572] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1573] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume !(8656 == #t~mem54); [L1229] havoc #t~mem54; [L1232] call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem55=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232-L1629] assume !(8657 == #t~mem55); [L1232] havoc #t~mem55; [L1235] call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem56=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235-L1628] assume 8672 == #t~mem56; [L1235] havoc #t~mem56; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1588] assume 3 == ~blastFlag~0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=24604, #NULL.offset=24595, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24588, ~#SSLv3_server_data~0.offset=24586, ~init~0=24607] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L1042] ~init~0 := 1; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100); [L1043] call write~init~int(0, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 4 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 8 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 12 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 16 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 20 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 24 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 28 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 32 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 36 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 40 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 44 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 48 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 52 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 56 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 60 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 64 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 68 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 72 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 76 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 80 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 84 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 88 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 92 + ~#SSLv3_server_data~0.offset, 4); [L1043] call write~init~$Pointer$(0, 0, ~#SSLv3_server_data~0.base, 96 + ~#SSLv3_server_data~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] ensures true; VAL [#NULL.base=0, #NULL.offset=0, old(#NULL.base)=24604, old(#NULL.offset)=24595, old(~#SSLv3_server_data~0.base)=24588, old(~#SSLv3_server_data~0.offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, 84 + ~s~0.offset, 4); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, 204 + ~s~0.offset, 4); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, 176 + ~s~0.offset, 4); [L1074] call write~int(8464, ~s~0.base, 52 + ~s~0.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~malloc3.base=24596, #t~malloc3.offset=0, #t~malloc4.base=24603, #t~malloc4.offset=0, #t~malloc5.base=24609, #t~malloc5.offset=0, #t~malloc6.base=24578, #t~malloc6.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1, ~s~0.base=24596, ~s~0.offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~init~0=1] [L1080-L1704] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] havoc ~buf~0.base, ~buf~0.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] call write~int(#t~nondet17, ~s.base, 92 + ~s.offset, 4); [L1107] havoc #t~nondet17; [L1108] call write~int(8464, ~s.base, 52 + ~s.offset, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0, 0; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem19.base=2, #t~mem19.offset=-1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=0, ~cb~0.offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115-L1119] assume 0 != (#t~mem19.base + #t~mem19.offset) % 4294967296; [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, 192 + ~s.offset, 4); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] call #t~mem21 := read~int(~s.base, 28 + ~s.offset, 4); [L1120] call write~int(1 + #t~mem21, ~s.base, 28 + ~s.offset, 4); [L1120] havoc #t~mem21; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] assume !(0 != ~bitwiseAnd(~tmp___1~0, 12288)); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, 136 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem22.base=3, #t~mem22.offset=-2, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130-L1134] assume !(0 == (#t~mem22.base + #t~mem22.offset) % 4294967296); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8464, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume 8464 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] call write~int(0, ~s.base, 48 + ~s.offset, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=0, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325-L1329] assume 0 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330-L1334] assume !(~ret~0 <= 0); [L1335] ~got_new_session~0 := 1; [L1336] call write~int(8496, ~s.base, 52 + ~s.offset, 4); [L1337] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8496, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume 8496 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=1, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342-L1350] assume 1 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1351-L1355] assume !(~ret~0 <= 0); [L1356] call #t~mem71 := read~int(~s.base, 92 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem71=1, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1356-L1360] assume 0 != #t~mem71; [L1356] havoc #t~mem71; [L1357] call write~int(8656, ~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1361] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8656, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume 8656 == #t~mem54; [L1229] havoc #t~mem54; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, 176 + ~s.offset, 4); [L1554] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1554] call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, 836 + #t~mem118.offset, 4); [L1554] call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, 172 + #t~mem117.offset, 4); [L1554] havoc #t~mem117.base, #t~mem117.offset; [L1554] havoc #t~mem118.base, #t~mem118.offset; [L1554] havoc #t~mem119.base, #t~mem119.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1555-L1560] assume !(0 == ~tmp___9~0); [L1561] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=2, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1562-L1566] assume 2 == ~blastFlag~0; [L1563] ~blastFlag~0 := 3; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567-L1571] assume !(~ret~0 <= 0); [L1572] call write~int(8672, ~s.base, 52 + ~s.offset, 4); [L1573] call write~int(0, ~s.base, 64 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574-L1579] assume !(0 == ~tmp___10~0); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, 84 + ~s.offset, 4); [L1661] call #t~mem128 := read~int(#t~mem127.base, 848 + #t~mem127.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem127.base=24603, #t~mem127.offset=0, #t~mem128=24598, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661-L1689] assume !(0 == #t~mem128); [L1661] havoc #t~mem128; [L1661] havoc #t~mem127.base, #t~mem127.offset; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] assume !false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] call #t~mem23 := read~int(~s.base, 52 + ~s.offset, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem24=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139-L1660] assume !(12292 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem25=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142-L1659] assume !(16384 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem26=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145-L1658] assume !(8192 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem27=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148-L1657] assume !(24576 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem28=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151-L1656] assume !(8195 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem29=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154-L1655] assume !(8480 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem30=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157-L1654] assume !(8481 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem31=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160-L1653] assume !(8482 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem32=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163-L1652] assume !(8464 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem33=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166-L1651] assume !(8465 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem34=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169-L1650] assume !(8466 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem35=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172-L1649] assume !(8496 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem36=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175-L1648] assume !(8497 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem37=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178-L1647] assume !(8512 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem38=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181-L1646] assume !(8513 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem39=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184-L1645] assume !(8528 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem40=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187-L1644] assume !(8529 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem41=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190-L1643] assume !(8544 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem42=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193-L1642] assume !(8545 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem43=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196-L1641] assume !(8560 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem44=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199-L1640] assume !(8561 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem45=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202-L1639] assume !(8448 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem46=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205-L1638] assume !(8576 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem47=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208-L1637] assume !(8577 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem48=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211-L1636] assume !(8592 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem49=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214-L1635] assume !(8593 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem50=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217-L1634] assume !(8608 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem51=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220-L1633] assume !(8609 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem52=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223-L1632] assume !(8640 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem53=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226-L1631] assume !(8641 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem54=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229-L1630] assume !(8656 == #t~mem54); [L1229] havoc #t~mem54; [L1232] call #t~mem55 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem55=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232-L1629] assume !(8657 == #t~mem55); [L1232] havoc #t~mem55; [L1235] call #t~mem56 := read~int(~s.base, 52 + ~s.offset, 4); VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, #t~mem56=8672, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235-L1628] assume 8672 == #t~mem56; [L1235] havoc #t~mem56; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584-L1588] assume 3 == ~blastFlag~0; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s.base=24596, #in~s.offset=0, #NULL.base=0, #NULL.offset=0, ~#SSLv3_server_data~0.base=24587, ~#SSLv3_server_data~0.offset=0, ~blastFlag~0=3, ~cb~0.base=2, ~cb~0.offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s.base=24596, ~s.offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1351] COND FALSE !(~ret~0 <= 0) [L1356] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1356-L1360] COND TRUE 0 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1361] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1554] havoc #t~mem117; [L1554] havoc #t~mem118; [L1554] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1555] COND FALSE !(0 == ~tmp___9~0) [L1561] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1562] COND TRUE 2 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 3 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1351] COND FALSE !(~ret~0 <= 0) [L1356] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1356-L1360] COND TRUE 0 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1361] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1554] havoc #t~mem117; [L1554] havoc #t~mem118; [L1554] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1555] COND FALSE !(0 == ~tmp___9~0) [L1561] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1562] COND TRUE 2 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 3 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1351] COND FALSE !(~ret~0 <= 0) [L1356] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1356-L1360] COND TRUE 0 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1361] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1554] havoc #t~mem117; [L1554] havoc #t~mem118; [L1554] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1555] COND FALSE !(0 == ~tmp___9~0) [L1561] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1562] COND TRUE 2 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 3 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] ----- [2018-11-23 09:55:16,923 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24586 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 09:55:16,944 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=24604, #NULL!offset=24595, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24588, ~#SSLv3_server_data~0!offset=24586, ~init~0=24607] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L1042] ~init~0 := 1; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100); [L1043] FCALL call write~init~int(0, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 4 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 8 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 12 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 16 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 20 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 24 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 28 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 32 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 36 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 40 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 44 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 48 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 52 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 56 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 60 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 64 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 68 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 72 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 76 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 80 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 84 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 88 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 92 + ~#SSLv3_server_data~0!offset }, 4); [L1043] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#SSLv3_server_data~0!base, offset: 96 + ~#SSLv3_server_data~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, old(#NULL!base)=24604, old(#NULL!offset)=24595, old(~#SSLv3_server_data~0!base)=24588, old(~#SSLv3_server_data~0!offset)=24586, old(~init~0)=24607, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: 84 + ~s~0!offset }, 4); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: 204 + ~s~0!offset }, 4); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: 176 + ~s~0!offset }, 4); [L1074] FCALL call write~int(8464, { base: ~s~0!base, offset: 52 + ~s~0!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~malloc3!base=24596, #t~malloc3!offset=0, #t~malloc4!base=24603, #t~malloc4!offset=0, #t~malloc5!base=24609, #t~malloc5!offset=0, #t~malloc6!base=24578, #t~malloc6!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1, ~s~0!base=24596, ~s~0!offset=0] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~init~0=1] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] assume -2147483648 <= #t~nondet8 && #t~nondet8 <= 2147483647; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] assume -2147483648 <= #t~nondet9 && #t~nondet9 <= 2147483647; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] assume -2147483648 <= #t~nondet11 && #t~nondet11 <= 2147483647; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] assume -2147483648 <= #t~nondet12 && #t~nondet12 <= 2147483647; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] assume -2147483648 <= #t~nondet13 && #t~nondet13 <= 2147483647; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] assume -2147483648 <= #t~nondet14 && #t~nondet14 <= 2147483647; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] assume -2147483648 <= #t~nondet15 && #t~nondet15 <= 2147483647; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] assume -2147483648 <= #t~nondet16 && #t~nondet16 <= 2147483647; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0; [L1107] assume -2147483648 <= #t~nondet17 && #t~nondet17 <= 2147483647; [L1107] FCALL call write~int(#t~nondet17, { base: ~s!base, offset: 92 + ~s!offset }, 4); [L1107] havoc #t~nondet17; [L1108] FCALL call write~int(8464, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1109] assume -2147483648 <= #t~nondet18 && #t~nondet18 <= 2147483647; [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0, offset: 0 }; [L1112] ~ret~0 := -1; [L1113] ~skip~0 := 0; [L1114] ~got_new_session~0 := 0; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem19!base=2, #t~mem19!offset=-1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=0, ~cb~0!offset=0, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1115] COND TRUE 0 != (#t~mem19!base + #t~mem19!offset) % 4294967296 [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: 192 + ~s!offset }, 4); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1120] FCALL call #t~mem21 := read~int({ base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] FCALL call write~int(1 + #t~mem21, { base: ~s!base, offset: 28 + ~s!offset }, 4); [L1120] havoc #t~mem21; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1121-L1129] COND FALSE !(0 != ~bitwiseAnd(~tmp___1~0, 12288)) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: 136 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem22!base=3, #t~mem22!offset=-2, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1130] COND FALSE !(0 == (#t~mem22!base + #t~mem22!offset) % 4294967296) [L1130] havoc #t~mem22; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8464, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND TRUE 8464 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=-1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1323] FCALL call write~int(0, { base: ~s!base, offset: 48 + ~s!offset }, 4); [L1324] assume -2147483648 <= #t~nondet69 && #t~nondet69 <= 2147483647; [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=0, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1325] COND TRUE 0 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=0, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1330] COND FALSE !(~ret~0 <= 0) [L1335] ~got_new_session~0 := 1; [L1336] FCALL call write~int(8496, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1337] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8464, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8496, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND TRUE 8496 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1341] assume -2147483648 <= #t~nondet70 && #t~nondet70 <= 2147483647; [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=1, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1342] COND TRUE 1 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1351] COND FALSE !(~ret~0 <= 0) [L1356] FCALL call #t~mem71 := read~int({ base: ~s!base, offset: 92 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem71=1, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1356-L1360] COND TRUE 0 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~int(8656, { base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1361] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8496, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8656, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND TRUE 8656 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: 176 + ~s!offset }, 4); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: 836 + #t~mem118!offset }, 4); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: 172 + #t~mem117!offset }, 4); [L1554] havoc #t~mem117; [L1554] havoc #t~mem118; [L1554] havoc #t~mem119; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1555] COND FALSE !(0 == ~tmp___9~0) [L1561] assume -2147483648 <= #t~nondet120 && #t~nondet120 <= 2147483647; [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=2, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1562] COND TRUE 2 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1567] COND FALSE !(~ret~0 <= 0) [L1572] FCALL call write~int(8672, { base: ~s!base, offset: 52 + ~s!offset }, 4); [L1573] FCALL call write~int(0, { base: ~s!base, offset: 64 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1574] COND FALSE !(0 == ~tmp___10~0) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: 84 + ~s!offset }, 4); [L1661] FCALL call #t~mem128 := read~int({ base: #t~mem127!base, offset: 848 + #t~mem127!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem127!base=24603, #t~mem127!offset=0, #t~mem128=24598, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1661] COND FALSE !(0 == #t~mem128) [L1661] havoc #t~mem128; [L1661] havoc #t~mem127; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1690] ~skip~0 := 0; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8656, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1138] FCALL call #t~mem23 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem24=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1139] COND FALSE !(12292 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem25=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1142] COND FALSE !(16384 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem26=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1145] COND FALSE !(8192 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem27=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1148] COND FALSE !(24576 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem28=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1151] COND FALSE !(8195 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem29=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1154] COND FALSE !(8480 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem30=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1157] COND FALSE !(8481 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem31=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1160] COND FALSE !(8482 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem32=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1163] COND FALSE !(8464 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem33=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1166] COND FALSE !(8465 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem34=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1169] COND FALSE !(8466 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem35=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1172] COND FALSE !(8496 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem36=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1175] COND FALSE !(8497 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem37=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1178] COND FALSE !(8512 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem38=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1181] COND FALSE !(8513 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem39=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1184] COND FALSE !(8528 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem40=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1187] COND FALSE !(8529 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem41=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1190] COND FALSE !(8544 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem42=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1193] COND FALSE !(8545 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem43=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1196] COND FALSE !(8560 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem44=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1199] COND FALSE !(8561 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem45=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1202] COND FALSE !(8448 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem46=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1205] COND FALSE !(8576 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem47=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1208] COND FALSE !(8577 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem48=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1211] COND FALSE !(8592 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem49=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1214] COND FALSE !(8593 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem50=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1217] COND FALSE !(8608 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem51=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1220] COND FALSE !(8609 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem52=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1223] COND FALSE !(8640 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem53=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1226] COND FALSE !(8641 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem54=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1229] COND FALSE !(8656 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem55=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1232] COND FALSE !(8657 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~int({ base: ~s!base, offset: 52 + ~s!offset }, 4); VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, #t~mem56=8672, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1235] COND TRUE 8672 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=1, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1583] assume -2147483648 <= #t~nondet121 && #t~nondet121 <= 2147483647; [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1584] COND TRUE 3 == ~blastFlag~0 VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1702] assert false; VAL [#in~s!base=24596, #in~s!offset=0, #NULL!base=0, #NULL!offset=0, ~#SSLv3_server_data~0!base=24587, ~#SSLv3_server_data~0!offset=0, ~blastFlag~0=3, ~cb~0!base=2, ~cb~0!offset=-1, ~got_new_session~0=1, ~init~0=1, ~ret~0=0, ~s!base=24596, ~s!offset=0, ~skip~0=0, ~state~0=8672, ~Time~0=0, ~tmp___10~0=1, ~tmp___1~0=0, ~tmp___2~0=0, ~tmp___3~0=0, ~tmp___4~0=0, ~tmp___5~0=0, ~tmp___6~0=0, ~tmp___8~0=0, ~tmp___9~0=1, ~tmp~3=0] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24607, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24596:0}, malloc(sizeof(SSL_CTX))={24609:0}, malloc(sizeof(SSL_SESSION))={24578:0}, malloc(sizeof(struct ssl3_state_st))={24603:0}, s={24596:0}, SSLv3_server_data={24587:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24596:0}, SSLv3_server_data={24587:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1351] COND FALSE !(ret <= 0) [L1356] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->hit=1, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1356] COND TRUE s->hit [L1357] s->state = 8656 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1361] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1554] EXPR s->session [L1554] EXPR s->s3 [L1554] EXPR (s->s3)->tmp.new_cipher [L1554] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1555] COND FALSE !(! tmp___9) [L1561] ret = __VERIFIER_nondet_int() [L1562] COND TRUE blastFlag == 2 [L1563] blastFlag = 3 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 3 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 09:55:17,813 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:55:17 BoogieIcfgContainer [2018-11-23 09:55:17,814 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 09:55:17,814 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 09:55:17,814 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 09:55:17,814 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 09:55:17,815 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:55:05" (3/4) ... [2018-11-23 09:55:17,818 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 09:55:17,819 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 09:55:17,819 INFO L168 Benchmark]: Toolchain (without parser) took 13665.89 ms. Allocated memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: 418.9 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -190.7 MB). Peak memory consumption was 228.2 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:17,821 INFO L168 Benchmark]: CDTParser took 0.10 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 09:55:17,821 INFO L168 Benchmark]: CACSL2BoogieTranslator took 462.26 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.5 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -167.6 MB). Peak memory consumption was 43.8 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:17,822 INFO L168 Benchmark]: Boogie Procedure Inliner took 32.94 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:17,822 INFO L168 Benchmark]: Boogie Preprocessor took 63.42 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:17,823 INFO L168 Benchmark]: RCFGBuilder took 902.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 80.6 MB). Peak memory consumption was 80.6 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:17,823 INFO L168 Benchmark]: TraceAbstraction took 12196.29 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 278.4 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -116.9 MB). Peak memory consumption was 161.4 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:17,824 INFO L168 Benchmark]: Witness Printer took 4.80 ms. Allocated memory is still 1.4 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 09:55:17,827 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10 ms. Allocated memory is still 1.0 GB. Free memory is still 985.4 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 462.26 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.5 MB). Free memory was 955.4 MB in the beginning and 1.1 GB in the end (delta: -167.6 MB). Peak memory consumption was 43.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 32.94 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.3 MB). Peak memory consumption was 3.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 63.42 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 902.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 80.6 MB). Peak memory consumption was 80.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 12196.29 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 278.4 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -116.9 MB). Peak memory consumption was 161.4 MB. Max. memory is 11.5 GB. * Witness Printer took 4.80 ms. Allocated memory is still 1.4 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24586 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: IntegerLiteral 24588 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - UnprovableResult [Line: 1702]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of bitwiseAnd at line 1121. Possible FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=24607, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={24587:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={24596:0}, malloc(sizeof(SSL_CTX))={24609:0}, malloc(sizeof(SSL_SESSION))={24578:0}, malloc(sizeof(struct ssl3_state_st))={24603:0}, s={24596:0}, SSLv3_server_data={24587:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={24596:0}, SSLv3_server_data={24587:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->info_callback={2:-1}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->cert={3:-2}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=0, got_new_session=0, init=1, ret=-1, s={24596:0}, s={24596:0}, s->state=8464, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={2:-1}, blastFlag=1, got_new_session=0, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=1, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8496, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1351] COND FALSE !(ret <= 0) [L1356] s->hit VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->hit=1, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1356] COND TRUE s->hit [L1357] s->state = 8656 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1361] s->init_num = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=2, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8656, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1554] EXPR s->session [L1554] EXPR s->s3 [L1554] EXPR (s->s3)->tmp.new_cipher [L1554] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1555] COND FALSE !(! tmp___9) [L1561] ret = __VERIFIER_nondet_int() [L1562] COND TRUE blastFlag == 2 [L1563] blastFlag = 3 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={2:-1}, (s->s3)->tmp.reuse_message=24598, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->s3={24603:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=1, s={24596:0}, s={24596:0}, s->state=8672, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 3 VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={2:-1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={24596:0}, s={24596:0}, skip=0, SSLv3_server_data={24587:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 154 locations, 1 error locations. UNSAFE Result, 12.1s OverallTime, 36 OverallIterations, 4 TraceHistogramMax, 6.9s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 6840 SDtfs, 1952 SDslu, 9806 SDs, 0 SdLazy, 6239 SolverSat, 305 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 5.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 238 GetRequests, 70 SyntacticMatches, 66 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=485occurred in iteration=35, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 35 MinimizatonAttempts, 846 StatesRemovedByMinimization, 34 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 3240 NumberOfCodeBlocks, 3240 NumberOfCodeBlocksAsserted, 36 NumberOfCheckSat, 3074 ConstructedInterpolants, 0 QuantifiedInterpolants, 772152 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 35 InterpolantComputations, 35 PerfectInterpolantSequences, 1434/1434 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 09:55:20,045 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 09:55:20,046 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 09:55:20,053 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 09:55:20,053 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 09:55:20,054 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 09:55:20,055 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 09:55:20,056 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 09:55:20,057 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 09:55:20,057 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 09:55:20,058 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 09:55:20,058 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 09:55:20,059 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 09:55:20,060 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 09:55:20,061 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 09:55:20,061 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 09:55:20,062 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 09:55:20,064 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 09:55:20,065 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 09:55:20,066 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 09:55:20,067 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 09:55:20,068 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 09:55:20,070 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 09:55:20,070 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 09:55:20,070 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 09:55:20,071 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 09:55:20,072 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 09:55:20,072 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 09:55:20,073 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 09:55:20,074 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 09:55:20,074 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 09:55:20,075 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 09:55:20,075 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 09:55:20,075 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 09:55:20,076 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 09:55:20,077 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 09:55:20,077 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/config/svcomp-Reach-32bit-Automizer_Bitvector.epf [2018-11-23 09:55:20,088 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 09:55:20,088 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 09:55:20,089 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 09:55:20,089 INFO L133 SettingsManager]: * ... calls to implemented procedures=ONLY_FOR_CONCURRENT_PROGRAMS [2018-11-23 09:55:20,089 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 09:55:20,089 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 09:55:20,089 INFO L133 SettingsManager]: * Use SBE=true [2018-11-23 09:55:20,090 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 09:55:20,090 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 09:55:20,091 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 09:55:20,091 INFO L133 SettingsManager]: * SMT solver=External_DefaultMode [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:55:20,092 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * Trace refinement strategy=WOLF [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 09:55:20,092 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 09:55:20,093 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bf0d0cf8dda9e68b67ebf00ec54daecd196b7f63 [2018-11-23 09:55:20,121 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 09:55:20,131 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 09:55:20,134 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 09:55:20,135 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 09:55:20,135 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 09:55:20,136 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/../../sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c [2018-11-23 09:55:20,173 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/7fef2c3e1/26b7468955584526bee87a96a616a4a3/FLAG77170d1fc [2018-11-23 09:55:20,646 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 09:55:20,646 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/sv-benchmarks/c/ssh/s3_srvr.blast.02_false-unreach-call.i.cil.c [2018-11-23 09:55:20,660 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/7fef2c3e1/26b7468955584526bee87a96a616a4a3/FLAG77170d1fc [2018-11-23 09:55:21,154 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/data/7fef2c3e1/26b7468955584526bee87a96a616a4a3 [2018-11-23 09:55:21,157 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 09:55:21,158 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 09:55:21,159 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 09:55:21,159 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 09:55:21,161 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 09:55:21,162 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,164 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@139a62e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21, skipping insertion in model container [2018-11-23 09:55:21,164 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,171 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 09:55:21,214 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 09:55:21,509 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 09:55:21,521 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 09:55:21,676 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 09:55:21,692 INFO L195 MainTranslator]: Completed translation [2018-11-23 09:55:21,692 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21 WrapperNode [2018-11-23 09:55:21,692 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 09:55:21,693 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 09:55:21,693 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 09:55:21,693 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 09:55:21,698 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,716 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,723 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 09:55:21,723 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 09:55:21,723 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 09:55:21,723 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 09:55:21,729 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,729 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,735 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,736 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,771 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,778 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,781 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... [2018-11-23 09:55:21,786 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 09:55:21,786 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 09:55:21,786 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 09:55:21,786 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 09:55:21,787 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2018-11-23 09:55:21,834 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 09:55:21,834 INFO L130 BoogieDeclarations]: Found specification of procedure main [2018-11-23 09:55:21,835 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure ssl3_accept [2018-11-23 09:55:21,835 INFO L138 BoogieDeclarations]: Found implementation of procedure ssl3_accept [2018-11-23 09:55:21,835 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2018-11-23 09:55:21,836 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2018-11-23 09:55:21,836 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 09:55:21,836 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 09:55:21,836 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 09:55:22,155 WARN L640 $ProcedureCfgBuilder]: Two Gotos in a row! There was dead code [2018-11-23 09:55:22,155 WARN L605 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2018-11-23 09:55:23,836 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 09:55:23,836 INFO L280 CfgBuilder]: Removed 1 assue(true) statements. [2018-11-23 09:55:23,837 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:55:23 BoogieIcfgContainer [2018-11-23 09:55:23,837 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 09:55:23,838 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2018-11-23 09:55:23,838 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2018-11-23 09:55:23,840 INFO L276 PluginConnector]: TraceAbstraction initialized [2018-11-23 09:55:23,840 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:55:21" (1/3) ... [2018-11-23 09:55:23,841 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@331b592d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:55:23, skipping insertion in model container [2018-11-23 09:55:23,841 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:55:21" (2/3) ... [2018-11-23 09:55:23,841 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@331b592d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:55:23, skipping insertion in model container [2018-11-23 09:55:23,842 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:55:23" (3/3) ... [2018-11-23 09:55:23,843 INFO L112 eAbstractionObserver]: Analyzing ICFG s3_srvr.blast.02_false-unreach-call.i.cil.c [2018-11-23 09:55:23,849 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2018-11-23 09:55:23,854 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2018-11-23 09:55:23,863 INFO L257 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2018-11-23 09:55:23,885 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-23 09:55:23,885 INFO L382 AbstractCegarLoop]: Interprodecural is true [2018-11-23 09:55:23,886 INFO L383 AbstractCegarLoop]: Hoare is true [2018-11-23 09:55:23,886 INFO L384 AbstractCegarLoop]: Compute interpolants for FPandBP [2018-11-23 09:55:23,886 INFO L385 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-23 09:55:23,886 INFO L386 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-23 09:55:23,886 INFO L387 AbstractCegarLoop]: Difference is false [2018-11-23 09:55:23,886 INFO L388 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-23 09:55:23,887 INFO L393 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2018-11-23 09:55:23,903 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states. [2018-11-23 09:55:23,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2018-11-23 09:55:23,910 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:23,910 INFO L402 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:23,912 INFO L423 AbstractCegarLoop]: === Iteration 1 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:23,916 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:23,916 INFO L82 PathProgramCache]: Analyzing trace with hash 1762902688, now seen corresponding path program 1 times [2018-11-23 09:55:23,921 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 09:55:23,921 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/cvc4nyu Starting monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 09:55:23,937 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:24,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:24,053 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 09:55:24,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:24,094 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 09:55:24,101 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:24,101 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:55:24,105 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:55:24,116 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:55:24,117 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:24,119 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 3 states. [2018-11-23 09:55:24,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:24,204 INFO L93 Difference]: Finished difference Result 420 states and 706 transitions. [2018-11-23 09:55:24,205 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:55:24,206 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2018-11-23 09:55:24,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:24,217 INFO L225 Difference]: With dead ends: 420 [2018-11-23 09:55:24,217 INFO L226 Difference]: Without dead ends: 255 [2018-11-23 09:55:24,221 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 49 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:24,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2018-11-23 09:55:24,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 255. [2018-11-23 09:55:24,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 255 states. [2018-11-23 09:55:24,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 382 transitions. [2018-11-23 09:55:24,261 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 382 transitions. Word has length 51 [2018-11-23 09:55:24,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:24,262 INFO L480 AbstractCegarLoop]: Abstraction has 255 states and 382 transitions. [2018-11-23 09:55:24,262 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:55:24,262 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 382 transitions. [2018-11-23 09:55:24,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2018-11-23 09:55:24,264 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:24,265 INFO L402 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:24,265 INFO L423 AbstractCegarLoop]: === Iteration 2 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:24,265 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:24,265 INFO L82 PathProgramCache]: Analyzing trace with hash -1096954691, now seen corresponding path program 1 times [2018-11-23 09:55:24,266 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 09:55:24,266 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/cvc4nyu Starting monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 09:55:24,282 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:24,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:24,357 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 09:55:24,372 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-23 09:55:24,372 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 09:55:24,374 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:24,374 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:55:24,375 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:55:24,375 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:55:24,375 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:24,376 INFO L87 Difference]: Start difference. First operand 255 states and 382 transitions. Second operand 3 states. [2018-11-23 09:55:24,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:24,435 INFO L93 Difference]: Finished difference Result 493 states and 747 transitions. [2018-11-23 09:55:24,435 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:55:24,435 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 68 [2018-11-23 09:55:24,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:24,437 INFO L225 Difference]: With dead ends: 493 [2018-11-23 09:55:24,438 INFO L226 Difference]: Without dead ends: 371 [2018-11-23 09:55:24,439 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:24,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2018-11-23 09:55:24,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 371. [2018-11-23 09:55:24,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 371 states. [2018-11-23 09:55:24,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 371 states to 371 states and 557 transitions. [2018-11-23 09:55:24,460 INFO L78 Accepts]: Start accepts. Automaton has 371 states and 557 transitions. Word has length 68 [2018-11-23 09:55:24,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:24,460 INFO L480 AbstractCegarLoop]: Abstraction has 371 states and 557 transitions. [2018-11-23 09:55:24,461 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:55:24,461 INFO L276 IsEmpty]: Start isEmpty. Operand 371 states and 557 transitions. [2018-11-23 09:55:24,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2018-11-23 09:55:24,463 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:24,463 INFO L402 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:24,464 INFO L423 AbstractCegarLoop]: === Iteration 3 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:24,464 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:24,464 INFO L82 PathProgramCache]: Analyzing trace with hash -1223775727, now seen corresponding path program 1 times [2018-11-23 09:55:24,465 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 09:55:24,465 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/cvc4nyu Starting monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 09:55:24,491 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:24,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 09:55:24,610 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-23 09:55:24,633 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2018-11-23 09:55:24,633 INFO L312 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2018-11-23 09:55:24,635 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-23 09:55:24,636 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-23 09:55:24,636 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2018-11-23 09:55:24,636 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-23 09:55:24,636 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:24,637 INFO L87 Difference]: Start difference. First operand 371 states and 557 transitions. Second operand 3 states. [2018-11-23 09:55:24,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-23 09:55:24,719 INFO L93 Difference]: Finished difference Result 727 states and 1101 transitions. [2018-11-23 09:55:24,719 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-23 09:55:24,719 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 90 [2018-11-23 09:55:24,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2018-11-23 09:55:24,722 INFO L225 Difference]: With dead ends: 727 [2018-11-23 09:55:24,722 INFO L226 Difference]: Without dead ends: 489 [2018-11-23 09:55:24,723 INFO L631 BasicCegarLoop]: 0 DeclaredPredicates, 89 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-23 09:55:24,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 489 states. [2018-11-23 09:55:24,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 489 to 489. [2018-11-23 09:55:24,741 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 489 states. [2018-11-23 09:55:24,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 489 states to 489 states and 735 transitions. [2018-11-23 09:55:24,744 INFO L78 Accepts]: Start accepts. Automaton has 489 states and 735 transitions. Word has length 90 [2018-11-23 09:55:24,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2018-11-23 09:55:24,744 INFO L480 AbstractCegarLoop]: Abstraction has 489 states and 735 transitions. [2018-11-23 09:55:24,744 INFO L481 AbstractCegarLoop]: Interpolant automaton has 3 states. [2018-11-23 09:55:24,745 INFO L276 IsEmpty]: Start isEmpty. Operand 489 states and 735 transitions. [2018-11-23 09:55:24,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 132 [2018-11-23 09:55:24,749 INFO L394 BasicCegarLoop]: Found error trace [2018-11-23 09:55:24,749 INFO L402 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-23 09:55:24,749 INFO L423 AbstractCegarLoop]: === Iteration 4 === [ssl3_acceptErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2018-11-23 09:55:24,750 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 09:55:24,750 INFO L82 PathProgramCache]: Analyzing trace with hash -187977106, now seen corresponding path program 1 times [2018-11-23 09:55:24,750 INFO L223 ckRefinementStrategy]: Switched to mode CVC4_FPBP [2018-11-23 09:55:24,751 INFO L69 tionRefinementEngine]: Using refinement strategy WolfRefinementStrategy No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/cvc4nyu Starting monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with cvc4nyu --tear-down-incremental --print-success --lang smt --rewrite-divk [2018-11-23 09:55:24,765 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-23 09:55:25,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 09:55:25,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 09:55:26,080 INFO L469 BasicCegarLoop]: Counterexample might be feasible ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #604#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv2147483651 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv2147483651 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19.base|=(_ bv0 32), |ssl3_accept_#t~mem19.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22.base|=(_ bv1 32), |ssl3_accept_#t~mem22.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND TRUE 8656bv32 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: ~bvadd32(836bv32, #t~mem118!offset) }, 4bv32); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: ~bvadd32(172bv32, #t~mem117!offset) }, 4bv32); [L1554] havoc #t~mem118; [L1554] havoc #t~mem117; [L1554] havoc #t~mem119; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555] COND FALSE !(0bv32 == ~tmp___9~0) [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562] COND TRUE 2bv32 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1572] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1573] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND FALSE !(8656bv32 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232] COND FALSE !(8657bv32 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235] COND TRUE 8672bv32 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND TRUE 3bv32 == ~blastFlag~0 VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1073741826:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={-2147483645:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={-2147483645:0}, SSLv3_server_data={1073741826:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={-2147483645:0}, SSLv3_server_data={1073741826:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={0:1}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1351] COND FALSE !(ret <= 0) [L1356] s->hit VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->hit=8192, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1356] COND TRUE s->hit [L1357] s->state = 8656 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1361] s->init_num = 0 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1554] EXPR s->session [L1554] EXPR s->s3 [L1554] EXPR (s->s3)->tmp.new_cipher [L1554] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1555] COND FALSE !(! tmp___9) [L1561] ret = __VERIFIER_nondet_int() [L1562] COND TRUE blastFlag == 2 [L1563] blastFlag = 3 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 3 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 09:55:26,962 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 09:55:26 BoogieIcfgContainer [2018-11-23 09:55:26,962 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2018-11-23 09:55:26,965 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 09:55:26,965 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 09:55:26,965 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 09:55:26,966 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:55:23" (3/4) ... [2018-11-23 09:55:26,968 INFO L138 WitnessPrinter]: Generating witness for reachability counterexample ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] CALL call ULTIMATE.init(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv0 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv0 32)] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];~init~0 := 1bv32;call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32);call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32);call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume true; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |old(#NULL.base)|=(_ bv0 32), |old(#NULL.offset)|=(_ bv0 32), |old(~#SSLv3_server_data~0.base)|=(_ bv0 32), |old(~#SSLv3_server_data~0.offset)|=(_ bv0 32), |old(~init~0)|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] RET #604#return; VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret138 := main(); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] havoc ~s~0.base, ~s~0.offset;havoc ~tmp~2;call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32);~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset;call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32);call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32);call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32);call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32);call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32);call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32);call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [main_~s~0.base=(_ bv2147483651 32), main_~s~0.offset=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |main_#t~malloc3.base|=(_ bv2147483651 32), |main_#t~malloc3.offset|=(_ bv0 32), |main_#t~malloc4.base|=(_ bv1 32), |main_#t~malloc4.offset|=(_ bv0 32), |main_#t~malloc5.base|=(_ bv3 32), |main_#t~malloc5.offset|=(_ bv0 32), |main_#t~malloc6.base|=(_ bv2 32), |main_#t~malloc6.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [|#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~s.base, ~s.offset := #in~s.base, #in~s.offset;havoc ~buf~0.base, ~buf~0.offset;havoc ~l~0;havoc ~Time~0;havoc ~tmp~3;havoc ~cb~0.base, ~cb~0.offset;havoc ~num1~0;havoc ~ret~0;havoc ~new_state~0;havoc ~state~0;havoc ~skip~0;havoc ~got_new_session~0;~tmp___1~0 := #t~nondet8;havoc #t~nondet8;~tmp___2~0 := #t~nondet9;havoc #t~nondet9;~tmp___3~0 := #t~nondet10;havoc #t~nondet10;~tmp___4~0 := #t~nondet11;havoc #t~nondet11;~tmp___5~0 := #t~nondet12;havoc #t~nondet12;~tmp___6~0 := #t~nondet13;havoc #t~nondet13;havoc ~tmp___7~0;~tmp___8~0 := #t~nondet14;havoc #t~nondet14;~tmp___9~0 := #t~nondet15;havoc #t~nondet15;~tmp___10~0 := #t~nondet16;havoc #t~nondet16;havoc ~blastFlag~0;~blastFlag~0 := 0bv32;call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32);havoc #t~nondet17;call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~tmp~3 := #t~nondet18;havoc #t~nondet18;~Time~0 := ~tmp~3;~cb~0.base, ~cb~0.offset := 0bv32, 0bv32;~ret~0 := 4294967295bv32;~skip~0 := 0bv32;~got_new_session~0 := 0bv32;call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv0 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem19.base|=(_ bv0 32), |ssl3_accept_#t~mem19.offset|=(_ bv1 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset);havoc #t~mem19.base, #t~mem19.offset;call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32);~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset;havoc #t~mem20.base, #t~mem20.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32);havoc #t~mem21; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem22.base|=(_ bv1 32), |ssl3_accept_#t~mem22.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset));havoc #t~mem22.base, #t~mem22.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8464 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8464bv32 == #t~mem32;havoc #t~mem32; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv4294967295 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32);~ret~0 := #t~nondet69;havoc #t~nondet69; VAL [ssl3_accept_~blastFlag~0=(_ bv0 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 == ~blastFlag~0;~blastFlag~0 := 1bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv0 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);~got_new_session~0 := 1bv32;call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv1 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8464 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8496 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8496bv32 == #t~mem35;havoc #t~mem35; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet70;havoc #t~nondet70; VAL [ssl3_accept_~blastFlag~0=(_ bv1 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 1bv32 == ~blastFlag~0;~blastFlag~0 := 2bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem71|=(_ bv8192 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 0bv32 != #t~mem71;havoc #t~mem71;call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv1 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8496 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem50|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem51|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem52|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem53|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem54|=(_ bv8656 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8656bv32 == #t~mem54;havoc #t~mem54; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32);call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, ~bvadd32(836bv32, #t~mem118.offset), 4bv32);call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, ~bvadd32(172bv32, #t~mem117.offset), 4bv32);havoc #t~mem118.base, #t~mem118.offset;havoc #t~mem117.base, #t~mem117.offset;havoc #t~mem119.base, #t~mem119.offset; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___9~0);~ret~0 := #t~nondet120;havoc #t~nondet120; VAL [ssl3_accept_~blastFlag~0=(_ bv2 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 2bv32 == ~blastFlag~0;~blastFlag~0 := 3bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !~bvsle32(~ret~0, 0bv32);call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == ~tmp___10~0); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32);call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem127.base|=(_ bv1 32), |ssl3_accept_#t~mem127.offset|=(_ bv0 32), |ssl3_accept_#t~mem128|=(_ bv64 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(0bv32 == #t~mem128);havoc #t~mem127.base, #t~mem127.offset;havoc #t~mem128; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~skip~0 := 0bv32; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8656 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32);~state~0 := #t~mem23;havoc #t~mem23;call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem24|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(12292bv32 == #t~mem24);havoc #t~mem24;call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem25|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(16384bv32 == #t~mem25);havoc #t~mem25;call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem26|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8192bv32 == #t~mem26);havoc #t~mem26;call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem27|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(24576bv32 == #t~mem27);havoc #t~mem27;call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem28|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8195bv32 == #t~mem28);havoc #t~mem28;call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem29|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8480bv32 == #t~mem29);havoc #t~mem29;call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem30|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8481bv32 == #t~mem30);havoc #t~mem30;call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem31|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8482bv32 == #t~mem31);havoc #t~mem31;call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem32|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8464bv32 == #t~mem32);havoc #t~mem32;call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem33|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8465bv32 == #t~mem33);havoc #t~mem33;call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem34|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8466bv32 == #t~mem34);havoc #t~mem34;call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem35|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8496bv32 == #t~mem35);havoc #t~mem35;call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem36|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8497bv32 == #t~mem36);havoc #t~mem36;call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem37|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8512bv32 == #t~mem37);havoc #t~mem37;call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem38|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8513bv32 == #t~mem38);havoc #t~mem38;call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem39|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8528bv32 == #t~mem39);havoc #t~mem39;call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem40|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8529bv32 == #t~mem40);havoc #t~mem40;call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem41|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8544bv32 == #t~mem41);havoc #t~mem41;call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem42|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8545bv32 == #t~mem42);havoc #t~mem42;call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem43|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8560bv32 == #t~mem43);havoc #t~mem43;call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem44|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8561bv32 == #t~mem44);havoc #t~mem44;call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem45|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8448bv32 == #t~mem45);havoc #t~mem45;call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem46|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8576bv32 == #t~mem46);havoc #t~mem46;call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem47|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8577bv32 == #t~mem47);havoc #t~mem47;call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem48|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8592bv32 == #t~mem48);havoc #t~mem48;call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem49|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8593bv32 == #t~mem49);havoc #t~mem49;call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem50|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8608bv32 == #t~mem50);havoc #t~mem50;call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem51|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8609bv32 == #t~mem51);havoc #t~mem51;call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem52|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8640bv32 == #t~mem52);havoc #t~mem52;call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem53|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8641bv32 == #t~mem53);havoc #t~mem53;call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem54|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8656bv32 == #t~mem54);havoc #t~mem54;call #t~mem55 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem55|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !(8657bv32 == #t~mem55);havoc #t~mem55;call #t~mem56 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |ssl3_accept_#t~mem56|=(_ bv8672 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 8672bv32 == #t~mem56;havoc #t~mem56; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv1073741824 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] ~ret~0 := #t~nondet121;havoc #t~nondet121; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume 3bv32 == ~blastFlag~0; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] assume !false; VAL [ssl3_accept_~blastFlag~0=(_ bv3 32), ssl3_accept_~cb~0.base=(_ bv0 32), ssl3_accept_~cb~0.offset=(_ bv1 32), ssl3_accept_~got_new_session~0=(_ bv1 32), ssl3_accept_~ret~0=(_ bv0 32), ssl3_accept_~s.base=(_ bv2147483651 32), ssl3_accept_~s.offset=(_ bv0 32), ssl3_accept_~skip~0=(_ bv0 32), ssl3_accept_~state~0=(_ bv8672 32), ssl3_accept_~Time~0=(_ bv0 32), ssl3_accept_~tmp___10~0=(_ bv1 32), ssl3_accept_~tmp___1~0=(_ bv0 32), ssl3_accept_~tmp___2~0=(_ bv0 32), ssl3_accept_~tmp___3~0=(_ bv0 32), ssl3_accept_~tmp___4~0=(_ bv0 32), ssl3_accept_~tmp___5~0=(_ bv0 32), ssl3_accept_~tmp___6~0=(_ bv0 32), ssl3_accept_~tmp___8~0=(_ bv0 32), ssl3_accept_~tmp___9~0=(_ bv1 32), ssl3_accept_~tmp~3=(_ bv0 32), |#NULL.base|=(_ bv0 32), |#NULL.offset|=(_ bv0 32), |ssl3_accept_#in~s.base|=(_ bv2147483651 32), |ssl3_accept_#in~s.offset|=(_ bv0 32), |~#SSLv3_server_data~0.base|=(_ bv1073741826 32), |~#SSLv3_server_data~0.offset|=(_ bv0 32), ~init~0=(_ bv1 32)] [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=2147483651bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=2147483651bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1704] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] havoc ~buf~0.base, ~buf~0.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet17; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19.base=0bv32, #t~mem19.offset=1bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1115-L1119] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset); [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1120] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] havoc #t~mem21; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1121-L1129] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22.base=1bv32, #t~mem22.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130-L1134] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset)); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume 8464bv32 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1323] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1325-L1329] assume 0bv32 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1330-L1334] assume !~bvsle32(~ret~0, 0bv32); [L1335] ~got_new_session~0 := 1bv32; [L1336] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1337] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1661] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=1bv32, #t~mem127.offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661-L1689] assume !(0bv32 == #t~mem128); [L1661] havoc #t~mem127.base, #t~mem127.offset; [L1661] havoc #t~mem128; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166-L1651] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169-L1650] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172-L1649] assume 8496bv32 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1342-L1350] assume 1bv32 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1351-L1355] assume !~bvsle32(~ret~0, 0bv32); [L1356] call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem71=8192bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1356-L1360] assume 0bv32 != #t~mem71; [L1356] havoc #t~mem71; [L1357] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1361] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1661] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=1bv32, #t~mem127.offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661-L1689] assume !(0bv32 == #t~mem128); [L1661] havoc #t~mem127.base, #t~mem127.offset; [L1661] havoc #t~mem128; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166-L1651] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169-L1650] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172-L1649] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175-L1648] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178-L1647] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181-L1646] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184-L1645] assume !(8528bv32 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187-L1644] assume !(8529bv32 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190-L1643] assume !(8544bv32 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193-L1642] assume !(8545bv32 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196-L1641] assume !(8560bv32 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199-L1640] assume !(8561bv32 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202-L1639] assume !(8448bv32 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205-L1638] assume !(8576bv32 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208-L1637] assume !(8577bv32 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211-L1636] assume !(8592bv32 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214-L1635] assume !(8593bv32 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217-L1634] assume !(8608bv32 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220-L1633] assume !(8609bv32 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223-L1632] assume !(8640bv32 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226-L1631] assume !(8641bv32 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229-L1630] assume 8656bv32 == #t~mem54; [L1229] havoc #t~mem54; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1554] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1554] call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, ~bvadd32(836bv32, #t~mem118.offset), 4bv32); [L1554] call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, ~bvadd32(172bv32, #t~mem117.offset), 4bv32); [L1554] havoc #t~mem118.base, #t~mem118.offset; [L1554] havoc #t~mem117.base, #t~mem117.offset; [L1554] havoc #t~mem119.base, #t~mem119.offset; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555-L1560] assume !(0bv32 == ~tmp___9~0); [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562-L1566] assume 2bv32 == ~blastFlag~0; [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567-L1571] assume !~bvsle32(~ret~0, 0bv32); [L1572] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1573] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1661] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=1bv32, #t~mem127.offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661-L1689] assume !(0bv32 == #t~mem128); [L1661] havoc #t~mem127.base, #t~mem127.offset; [L1661] havoc #t~mem128; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166-L1651] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169-L1650] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172-L1649] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175-L1648] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178-L1647] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181-L1646] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184-L1645] assume !(8528bv32 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187-L1644] assume !(8529bv32 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190-L1643] assume !(8544bv32 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193-L1642] assume !(8545bv32 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196-L1641] assume !(8560bv32 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199-L1640] assume !(8561bv32 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202-L1639] assume !(8448bv32 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205-L1638] assume !(8576bv32 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208-L1637] assume !(8577bv32 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211-L1636] assume !(8592bv32 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214-L1635] assume !(8593bv32 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217-L1634] assume !(8608bv32 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220-L1633] assume !(8609bv32 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223-L1632] assume !(8640bv32 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226-L1631] assume !(8641bv32 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229-L1630] assume !(8656bv32 == #t~mem54); [L1229] havoc #t~mem54; [L1232] call #t~mem55 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232-L1629] assume !(8657bv32 == #t~mem55); [L1232] havoc #t~mem55; [L1235] call #t~mem56 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235-L1628] assume 8672bv32 == #t~mem56; [L1235] havoc #t~mem56; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1588] assume 3bv32 == ~blastFlag~0; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=0bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=0bv32] [?] #NULL.base, #NULL.offset := 0bv32, 0bv32; [?] #valid := #valid[0bv32 := 0bv1]; [L1042] ~init~0 := 1bv32; [L1043] call ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset := #Ultimate.alloc(100bv32); [L1043] call write~init~intINTTYPE4(0bv32, ~#SSLv3_server_data~0.base, ~#SSLv3_server_data~0.offset, 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(4bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(8bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(12bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(16bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(20bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(24bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(28bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(32bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(36bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(40bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(44bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(48bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(52bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(56bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(60bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(64bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(68bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(72bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(76bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(80bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(84bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(88bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(92bv32, ~#SSLv3_server_data~0.offset), 4bv32); [L1043] call write~init~$Pointer$(0bv32, 0bv32, ~#SSLv3_server_data~0.base, ~bvadd32(96bv32, ~#SSLv3_server_data~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] ensures true; VAL [#NULL.base=0bv32, #NULL.offset=0bv32, old(#NULL.base)=0bv32, old(#NULL.offset)=0bv32, old(~#SSLv3_server_data~0.base)=0bv32, old(~#SSLv3_server_data~0.offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0.base, ~s~0.offset; [L1066] havoc ~tmp~2; [L1070] call #t~malloc3.base, #t~malloc3.offset := #Ultimate.alloc(248bv32); [L1070] ~s~0.base, ~s~0.offset := #t~malloc3.base, #t~malloc3.offset; [L1071] call #t~malloc4.base, #t~malloc4.offset := #Ultimate.alloc(899bv32); [L1071] call write~$Pointer$(#t~malloc4.base, #t~malloc4.offset, ~s~0.base, ~bvadd32(84bv32, ~s~0.offset), 4bv32); [L1072] call #t~malloc5.base, #t~malloc5.offset := #Ultimate.alloc(232bv32); [L1072] call write~$Pointer$(#t~malloc5.base, #t~malloc5.offset, ~s~0.base, ~bvadd32(204bv32, ~s~0.offset), 4bv32); [L1073] call #t~malloc6.base, #t~malloc6.offset := #Ultimate.alloc(200bv32); [L1073] call write~$Pointer$(#t~malloc6.base, #t~malloc6.offset, ~s~0.base, ~bvadd32(176bv32, ~s~0.offset), 4bv32); [L1074] call write~intINTTYPE4(8464bv32, ~s~0.base, ~bvadd32(52bv32, ~s~0.offset), 4bv32); VAL [#NULL.base=0bv32, #NULL.offset=0bv32, #t~malloc3.base=2147483651bv32, #t~malloc3.offset=0bv32, #t~malloc4.base=1bv32, #t~malloc4.offset=0bv32, #t~malloc5.base=3bv32, #t~malloc5.offset=0bv32, #t~malloc6.base=2bv32, #t~malloc6.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32, ~s~0.base=2147483651bv32, ~s~0.offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0.base, ~s~0.offset); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~init~0=1bv32] [L1080-L1704] ~s.base, ~s.offset := #in~s.base, #in~s.offset; [L1081] havoc ~buf~0.base, ~buf~0.offset; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0.base, ~cb~0.offset; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] call write~intINTTYPE4(#t~nondet17, ~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); [L1107] havoc #t~nondet17; [L1108] call write~intINTTYPE4(8464bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0.base, ~cb~0.offset := 0bv32, 0bv32; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] call #t~mem19.base, #t~mem19.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem19.base=0bv32, #t~mem19.offset=1bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1115-L1119] assume 0bv32 != ~bvadd32(#t~mem19.base, #t~mem19.offset); [L1115] havoc #t~mem19.base, #t~mem19.offset; [L1116] call #t~mem20.base, #t~mem20.offset := read~$Pointer$(~s.base, ~bvadd32(192bv32, ~s.offset), 4bv32); [L1116] ~cb~0.base, ~cb~0.offset := #t~mem20.base, #t~mem20.offset; [L1116] havoc #t~mem20.base, #t~mem20.offset; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1120] call #t~mem21 := read~intINTTYPE4(~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), ~s.base, ~bvadd32(28bv32, ~s.offset), 4bv32); [L1120] havoc #t~mem21; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1121-L1129] assume !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] call #t~mem22.base, #t~mem22.offset := read~$Pointer$(~s.base, ~bvadd32(136bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem22.base=1bv32, #t~mem22.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130-L1134] assume !(0bv32 == ~bvadd32(#t~mem22.base, #t~mem22.offset)); [L1130] havoc #t~mem22.base, #t~mem22.offset; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume 8464bv32 == #t~mem32; [L1163] havoc #t~mem32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1323] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(48bv32, ~s.offset), 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=0bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1325-L1329] assume 0bv32 == ~blastFlag~0; [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1330-L1334] assume !~bvsle32(~ret~0, 0bv32); [L1335] ~got_new_session~0 := 1bv32; [L1336] call write~intINTTYPE4(8496bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1337] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1661] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=1bv32, #t~mem127.offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661-L1689] assume !(0bv32 == #t~mem128); [L1661] havoc #t~mem127.base, #t~mem127.offset; [L1661] havoc #t~mem128; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166-L1651] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169-L1650] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172-L1649] assume 8496bv32 == #t~mem35; [L1172] havoc #t~mem35; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=1bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1342-L1350] assume 1bv32 == ~blastFlag~0; [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1351-L1355] assume !~bvsle32(~ret~0, 0bv32); [L1356] call #t~mem71 := read~intINTTYPE4(~s.base, ~bvadd32(92bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem71=8192bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1356-L1360] assume 0bv32 != #t~mem71; [L1356] havoc #t~mem71; [L1357] call write~intINTTYPE4(8656bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1361] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1661] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=1bv32, #t~mem127.offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661-L1689] assume !(0bv32 == #t~mem128); [L1661] havoc #t~mem127.base, #t~mem127.offset; [L1661] havoc #t~mem128; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166-L1651] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169-L1650] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172-L1649] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175-L1648] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178-L1647] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181-L1646] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184-L1645] assume !(8528bv32 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187-L1644] assume !(8529bv32 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190-L1643] assume !(8544bv32 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193-L1642] assume !(8545bv32 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196-L1641] assume !(8560bv32 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199-L1640] assume !(8561bv32 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202-L1639] assume !(8448bv32 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205-L1638] assume !(8576bv32 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208-L1637] assume !(8577bv32 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211-L1636] assume !(8592bv32 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214-L1635] assume !(8593bv32 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217-L1634] assume !(8608bv32 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220-L1633] assume !(8609bv32 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223-L1632] assume !(8640bv32 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226-L1631] assume !(8641bv32 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229-L1630] assume 8656bv32 == #t~mem54; [L1229] havoc #t~mem54; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] call #t~mem117.base, #t~mem117.offset := read~$Pointer$(~s.base, ~bvadd32(176bv32, ~s.offset), 4bv32); [L1554] call #t~mem118.base, #t~mem118.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1554] call #t~mem119.base, #t~mem119.offset := read~$Pointer$(#t~mem118.base, ~bvadd32(836bv32, #t~mem118.offset), 4bv32); [L1554] call write~$Pointer$(#t~mem119.base, #t~mem119.offset, #t~mem117.base, ~bvadd32(172bv32, #t~mem117.offset), 4bv32); [L1554] havoc #t~mem118.base, #t~mem118.offset; [L1554] havoc #t~mem117.base, #t~mem117.offset; [L1554] havoc #t~mem119.base, #t~mem119.offset; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555-L1560] assume !(0bv32 == ~tmp___9~0); [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=2bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562-L1566] assume 2bv32 == ~blastFlag~0; [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567-L1571] assume !~bvsle32(~ret~0, 0bv32); [L1572] call write~intINTTYPE4(8672bv32, ~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1573] call write~intINTTYPE4(0bv32, ~s.base, ~bvadd32(64bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574-L1579] assume !(0bv32 == ~tmp___10~0); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] call #t~mem127.base, #t~mem127.offset := read~$Pointer$(~s.base, ~bvadd32(84bv32, ~s.offset), 4bv32); [L1661] call #t~mem128 := read~intINTTYPE4(#t~mem127.base, ~bvadd32(848bv32, #t~mem127.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem127.base=1bv32, #t~mem127.offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661-L1689] assume !(0bv32 == #t~mem128); [L1661] havoc #t~mem127.base, #t~mem127.offset; [L1661] havoc #t~mem128; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] assume !false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] call #t~mem23 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] call #t~mem24 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139-L1660] assume !(12292bv32 == #t~mem24); [L1139] havoc #t~mem24; [L1142] call #t~mem25 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142-L1659] assume !(16384bv32 == #t~mem25); [L1142] havoc #t~mem25; [L1145] call #t~mem26 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145-L1658] assume !(8192bv32 == #t~mem26); [L1145] havoc #t~mem26; [L1148] call #t~mem27 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148-L1657] assume !(24576bv32 == #t~mem27); [L1148] havoc #t~mem27; [L1151] call #t~mem28 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151-L1656] assume !(8195bv32 == #t~mem28); [L1151] havoc #t~mem28; [L1154] call #t~mem29 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154-L1655] assume !(8480bv32 == #t~mem29); [L1154] havoc #t~mem29; [L1157] call #t~mem30 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157-L1654] assume !(8481bv32 == #t~mem30); [L1157] havoc #t~mem30; [L1160] call #t~mem31 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160-L1653] assume !(8482bv32 == #t~mem31); [L1160] havoc #t~mem31; [L1163] call #t~mem32 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163-L1652] assume !(8464bv32 == #t~mem32); [L1163] havoc #t~mem32; [L1166] call #t~mem33 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166-L1651] assume !(8465bv32 == #t~mem33); [L1166] havoc #t~mem33; [L1169] call #t~mem34 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169-L1650] assume !(8466bv32 == #t~mem34); [L1169] havoc #t~mem34; [L1172] call #t~mem35 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172-L1649] assume !(8496bv32 == #t~mem35); [L1172] havoc #t~mem35; [L1175] call #t~mem36 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175-L1648] assume !(8497bv32 == #t~mem36); [L1175] havoc #t~mem36; [L1178] call #t~mem37 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178-L1647] assume !(8512bv32 == #t~mem37); [L1178] havoc #t~mem37; [L1181] call #t~mem38 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181-L1646] assume !(8513bv32 == #t~mem38); [L1181] havoc #t~mem38; [L1184] call #t~mem39 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184-L1645] assume !(8528bv32 == #t~mem39); [L1184] havoc #t~mem39; [L1187] call #t~mem40 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187-L1644] assume !(8529bv32 == #t~mem40); [L1187] havoc #t~mem40; [L1190] call #t~mem41 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190-L1643] assume !(8544bv32 == #t~mem41); [L1190] havoc #t~mem41; [L1193] call #t~mem42 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193-L1642] assume !(8545bv32 == #t~mem42); [L1193] havoc #t~mem42; [L1196] call #t~mem43 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196-L1641] assume !(8560bv32 == #t~mem43); [L1196] havoc #t~mem43; [L1199] call #t~mem44 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199-L1640] assume !(8561bv32 == #t~mem44); [L1199] havoc #t~mem44; [L1202] call #t~mem45 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202-L1639] assume !(8448bv32 == #t~mem45); [L1202] havoc #t~mem45; [L1205] call #t~mem46 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205-L1638] assume !(8576bv32 == #t~mem46); [L1205] havoc #t~mem46; [L1208] call #t~mem47 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208-L1637] assume !(8577bv32 == #t~mem47); [L1208] havoc #t~mem47; [L1211] call #t~mem48 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211-L1636] assume !(8592bv32 == #t~mem48); [L1211] havoc #t~mem48; [L1214] call #t~mem49 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214-L1635] assume !(8593bv32 == #t~mem49); [L1214] havoc #t~mem49; [L1217] call #t~mem50 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217-L1634] assume !(8608bv32 == #t~mem50); [L1217] havoc #t~mem50; [L1220] call #t~mem51 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220-L1633] assume !(8609bv32 == #t~mem51); [L1220] havoc #t~mem51; [L1223] call #t~mem52 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223-L1632] assume !(8640bv32 == #t~mem52); [L1223] havoc #t~mem52; [L1226] call #t~mem53 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226-L1631] assume !(8641bv32 == #t~mem53); [L1226] havoc #t~mem53; [L1229] call #t~mem54 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229-L1630] assume !(8656bv32 == #t~mem54); [L1229] havoc #t~mem54; [L1232] call #t~mem55 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232-L1629] assume !(8657bv32 == #t~mem55); [L1232] havoc #t~mem55; [L1235] call #t~mem56 := read~intINTTYPE4(~s.base, ~bvadd32(52bv32, ~s.offset), 4bv32); VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235-L1628] assume 8672bv32 == #t~mem56; [L1235] havoc #t~mem56; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584-L1588] assume 3bv32 == ~blastFlag~0; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s.base=2147483651bv32, #in~s.offset=0bv32, #NULL.base=0bv32, #NULL.offset=0bv32, ~#SSLv3_server_data~0.base=1073741826bv32, ~#SSLv3_server_data~0.offset=0bv32, ~blastFlag~0=3bv32, ~cb~0.base=0bv32, ~cb~0.offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s.base=2147483651bv32, ~s.offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=2147483651bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=2147483651bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=0bv32, #t~mem19!offset=1bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1351] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1356] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=8192bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1356-L1360] COND TRUE 0bv32 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1361] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND TRUE 8656bv32 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: ~bvadd32(836bv32, #t~mem118!offset) }, 4bv32); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: ~bvadd32(172bv32, #t~mem117!offset) }, 4bv32); [L1554] havoc #t~mem118; [L1554] havoc #t~mem117; [L1554] havoc #t~mem119; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555] COND FALSE !(0bv32 == ~tmp___9~0) [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562] COND TRUE 2bv32 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1572] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1573] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND FALSE !(8656bv32 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232] COND FALSE !(8657bv32 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235] COND TRUE 8672bv32 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND TRUE 3bv32 == ~blastFlag~0 VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=2147483651bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=2147483651bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=0bv32, #t~mem19!offset=1bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1351] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1356] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=8192bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1356-L1360] COND TRUE 0bv32 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1361] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND TRUE 8656bv32 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: ~bvadd32(836bv32, #t~mem118!offset) }, 4bv32); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: ~bvadd32(172bv32, #t~mem117!offset) }, 4bv32); [L1554] havoc #t~mem118; [L1554] havoc #t~mem117; [L1554] havoc #t~mem119; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555] COND FALSE !(0bv32 == ~tmp___9~0) [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562] COND TRUE 2bv32 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1572] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1573] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND FALSE !(8656bv32 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232] COND FALSE !(8657bv32 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235] COND TRUE 8672bv32 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND TRUE 3bv32 == ~blastFlag~0 VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=2147483651bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=2147483651bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=0bv32, #t~mem19!offset=1bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1351] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1356] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=8192bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1356-L1360] COND TRUE 0bv32 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1361] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND TRUE 8656bv32 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: ~bvadd32(836bv32, #t~mem118!offset) }, 4bv32); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: ~bvadd32(172bv32, #t~mem117!offset) }, 4bv32); [L1554] havoc #t~mem118; [L1554] havoc #t~mem117; [L1554] havoc #t~mem119; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555] COND FALSE !(0bv32 == ~tmp___9~0) [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562] COND TRUE 2bv32 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1572] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1573] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND FALSE !(8656bv32 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232] COND FALSE !(8657bv32 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235] COND TRUE 8672bv32 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND TRUE 3bv32 == ~blastFlag~0 VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] ----- [2018-11-23 09:55:32,000 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# [2018-11-23 09:55:32,001 WARN L1272 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] CALL call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=0bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=0bv32] [?] #NULL := { base: 0bv32, offset: 0bv32 }; [?] #valid[0bv32] := 0bv1; [L1042] ~init~0 := 1bv32; [L1043] FCALL call ~#SSLv3_server_data~0 := #Ultimate.alloc(100bv32); [L1043] FCALL call write~init~intINTTYPE4(0bv32, { base: ~#SSLv3_server_data~0!base, offset: ~#SSLv3_server_data~0!offset }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(4bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(8bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(12bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(16bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(20bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(24bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(28bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(32bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(36bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(40bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(44bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(48bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(52bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(56bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(60bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(64bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(68bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(72bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(76bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(80bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(84bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(88bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(92bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); [L1043] FCALL call write~init~$Pointer$({ base: 0bv32, offset: 0bv32 }, { base: ~#SSLv3_server_data~0!base, offset: ~bvadd32(96bv32, ~#SSLv3_server_data~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, old(#NULL!base)=0bv32, old(#NULL!offset)=0bv32, old(~#SSLv3_server_data~0!base)=0bv32, old(~#SSLv3_server_data~0!offset)=0bv32, old(~init~0)=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] RET call ULTIMATE.init(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [?] CALL call #t~ret138 := main(); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1065] havoc ~s~0; [L1066] havoc ~tmp~2; [L1070] FCALL call #t~malloc3 := #Ultimate.alloc(248bv32); [L1070] ~s~0 := #t~malloc3; [L1071] FCALL call #t~malloc4 := #Ultimate.alloc(899bv32); [L1071] FCALL call write~$Pointer$(#t~malloc4, { base: ~s~0!base, offset: ~bvadd32(84bv32, ~s~0!offset) }, 4bv32); [L1072] FCALL call #t~malloc5 := #Ultimate.alloc(232bv32); [L1072] FCALL call write~$Pointer$(#t~malloc5, { base: ~s~0!base, offset: ~bvadd32(204bv32, ~s~0!offset) }, 4bv32); [L1073] FCALL call #t~malloc6 := #Ultimate.alloc(200bv32); [L1073] FCALL call write~$Pointer$(#t~malloc6, { base: ~s~0!base, offset: ~bvadd32(176bv32, ~s~0!offset) }, 4bv32); [L1074] FCALL call write~intINTTYPE4(8464bv32, { base: ~s~0!base, offset: ~bvadd32(52bv32, ~s~0!offset) }, 4bv32); VAL [#NULL!base=0bv32, #NULL!offset=0bv32, #t~malloc3!base=2147483651bv32, #t~malloc3!offset=0bv32, #t~malloc4!base=1bv32, #t~malloc4!offset=0bv32, #t~malloc5!base=3bv32, #t~malloc5!offset=0bv32, #t~malloc6!base=2bv32, #t~malloc6!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32, ~s~0!base=2147483651bv32, ~s~0!offset=0bv32] [L1075] CALL call #t~ret7 := ssl3_accept(~s~0); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~init~0=1bv32] [L1080-L1704] ~s := #in~s; [L1081] havoc ~buf~0; [L1082] havoc ~l~0; [L1083] havoc ~Time~0; [L1084] havoc ~tmp~3; [L1085] havoc ~cb~0; [L1086] havoc ~num1~0; [L1087] havoc ~ret~0; [L1088] havoc ~new_state~0; [L1089] havoc ~state~0; [L1090] havoc ~skip~0; [L1091] havoc ~got_new_session~0; [L1092] ~tmp___1~0 := #t~nondet8; [L1092] havoc #t~nondet8; [L1093] ~tmp___2~0 := #t~nondet9; [L1093] havoc #t~nondet9; [L1094] ~tmp___3~0 := #t~nondet10; [L1094] havoc #t~nondet10; [L1095] ~tmp___4~0 := #t~nondet11; [L1095] havoc #t~nondet11; [L1096] ~tmp___5~0 := #t~nondet12; [L1096] havoc #t~nondet12; [L1097] ~tmp___6~0 := #t~nondet13; [L1097] havoc #t~nondet13; [L1098] havoc ~tmp___7~0; [L1099] ~tmp___8~0 := #t~nondet14; [L1099] havoc #t~nondet14; [L1100] ~tmp___9~0 := #t~nondet15; [L1100] havoc #t~nondet15; [L1101] ~tmp___10~0 := #t~nondet16; [L1101] havoc #t~nondet16; [L1102] havoc ~blastFlag~0; [L1106] ~blastFlag~0 := 0bv32; [L1107] FCALL call write~intINTTYPE4(#t~nondet17, { base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); [L1107] havoc #t~nondet17; [L1108] FCALL call write~intINTTYPE4(8464bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1109] ~tmp~3 := #t~nondet18; [L1109] havoc #t~nondet18; [L1110] ~Time~0 := ~tmp~3; [L1111] ~cb~0 := { base: 0bv32, offset: 0bv32 }; [L1112] ~ret~0 := 4294967295bv32; [L1113] ~skip~0 := 0bv32; [L1114] ~got_new_session~0 := 0bv32; [L1115] FCALL call #t~mem19 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem19!base=0bv32, #t~mem19!offset=1bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=0bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1115] COND TRUE 0bv32 != ~bvadd32(#t~mem19!base, #t~mem19!offset) [L1115] havoc #t~mem19; [L1116] FCALL call #t~mem20 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(192bv32, ~s!offset) }, 4bv32); [L1116] ~cb~0 := #t~mem20; [L1116] havoc #t~mem20; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1120] FCALL call #t~mem21 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] FCALL call write~intINTTYPE4(~bvadd32(1bv32, #t~mem21), { base: ~s!base, offset: ~bvadd32(28bv32, ~s!offset) }, 4bv32); [L1120] havoc #t~mem21; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1121-L1129] COND FALSE !(0bv32 != ~bvand32(12288bv32, ~tmp___1~0)) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] FCALL call #t~mem22 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(136bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem22!base=1bv32, #t~mem22!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1130] COND FALSE !(0bv32 == ~bvadd32(#t~mem22!base, #t~mem22!offset)) [L1130] havoc #t~mem22; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8464bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND TRUE 8464bv32 == #t~mem32 [L1163] havoc #t~mem32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=4294967295bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1323] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(48bv32, ~s!offset) }, 4bv32); [L1324] ~ret~0 := #t~nondet69; [L1324] havoc #t~nondet69; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=0bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1325] COND TRUE 0bv32 == ~blastFlag~0 [L1326] ~blastFlag~0 := 1bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=0bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1330] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1335] ~got_new_session~0 := 1bv32; [L1336] FCALL call write~intINTTYPE4(8496bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1337] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8464bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8496bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND TRUE 8496bv32 == #t~mem35 [L1172] havoc #t~mem35; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1341] ~ret~0 := #t~nondet70; [L1341] havoc #t~nondet70; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=1bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1342] COND TRUE 1bv32 == ~blastFlag~0 [L1343] ~blastFlag~0 := 2bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1351] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1356] FCALL call #t~mem71 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(92bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem71=8192bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1356-L1360] COND TRUE 0bv32 != #t~mem71 [L1356] havoc #t~mem71; [L1357] FCALL call write~intINTTYPE4(8656bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1361] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8496bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8656bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND TRUE 8656bv32 == #t~mem54 [L1229] havoc #t~mem54; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1554] FCALL call #t~mem117 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(176bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem118 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1554] FCALL call #t~mem119 := read~$Pointer$({ base: #t~mem118!base, offset: ~bvadd32(836bv32, #t~mem118!offset) }, 4bv32); [L1554] FCALL call write~$Pointer$(#t~mem119, { base: #t~mem117!base, offset: ~bvadd32(172bv32, #t~mem117!offset) }, 4bv32); [L1554] havoc #t~mem118; [L1554] havoc #t~mem117; [L1554] havoc #t~mem119; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1555] COND FALSE !(0bv32 == ~tmp___9~0) [L1561] ~ret~0 := #t~nondet120; [L1561] havoc #t~nondet120; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=2bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1562] COND TRUE 2bv32 == ~blastFlag~0 [L1563] ~blastFlag~0 := 3bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1567] COND FALSE !(~bvsle32(~ret~0, 0bv32)) [L1572] FCALL call write~intINTTYPE4(8672bv32, { base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1573] FCALL call write~intINTTYPE4(0bv32, { base: ~s!base, offset: ~bvadd32(64bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1574] COND FALSE !(0bv32 == ~tmp___10~0) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] FCALL call #t~mem127 := read~$Pointer$({ base: ~s!base, offset: ~bvadd32(84bv32, ~s!offset) }, 4bv32); [L1661] FCALL call #t~mem128 := read~intINTTYPE4({ base: #t~mem127!base, offset: ~bvadd32(848bv32, #t~mem127!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem127!base=1bv32, #t~mem127!offset=0bv32, #t~mem128=64bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1661] COND FALSE !(0bv32 == #t~mem128) [L1661] havoc #t~mem127; [L1661] havoc #t~mem128; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1690] ~skip~0 := 0bv32; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1136-L1691] COND FALSE !(false) VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8656bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1138] FCALL call #t~mem23 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); [L1138] ~state~0 := #t~mem23; [L1138] havoc #t~mem23; [L1139] FCALL call #t~mem24 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem24=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1139] COND FALSE !(12292bv32 == #t~mem24) [L1139] havoc #t~mem24; [L1142] FCALL call #t~mem25 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem25=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1142] COND FALSE !(16384bv32 == #t~mem25) [L1142] havoc #t~mem25; [L1145] FCALL call #t~mem26 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem26=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1145] COND FALSE !(8192bv32 == #t~mem26) [L1145] havoc #t~mem26; [L1148] FCALL call #t~mem27 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem27=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1148] COND FALSE !(24576bv32 == #t~mem27) [L1148] havoc #t~mem27; [L1151] FCALL call #t~mem28 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem28=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1151] COND FALSE !(8195bv32 == #t~mem28) [L1151] havoc #t~mem28; [L1154] FCALL call #t~mem29 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem29=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1154] COND FALSE !(8480bv32 == #t~mem29) [L1154] havoc #t~mem29; [L1157] FCALL call #t~mem30 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem30=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1157] COND FALSE !(8481bv32 == #t~mem30) [L1157] havoc #t~mem30; [L1160] FCALL call #t~mem31 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem31=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1160] COND FALSE !(8482bv32 == #t~mem31) [L1160] havoc #t~mem31; [L1163] FCALL call #t~mem32 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem32=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1163] COND FALSE !(8464bv32 == #t~mem32) [L1163] havoc #t~mem32; [L1166] FCALL call #t~mem33 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem33=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1166] COND FALSE !(8465bv32 == #t~mem33) [L1166] havoc #t~mem33; [L1169] FCALL call #t~mem34 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem34=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1169] COND FALSE !(8466bv32 == #t~mem34) [L1169] havoc #t~mem34; [L1172] FCALL call #t~mem35 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem35=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1172] COND FALSE !(8496bv32 == #t~mem35) [L1172] havoc #t~mem35; [L1175] FCALL call #t~mem36 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem36=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1175] COND FALSE !(8497bv32 == #t~mem36) [L1175] havoc #t~mem36; [L1178] FCALL call #t~mem37 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem37=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1178] COND FALSE !(8512bv32 == #t~mem37) [L1178] havoc #t~mem37; [L1181] FCALL call #t~mem38 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem38=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1181] COND FALSE !(8513bv32 == #t~mem38) [L1181] havoc #t~mem38; [L1184] FCALL call #t~mem39 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem39=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1184] COND FALSE !(8528bv32 == #t~mem39) [L1184] havoc #t~mem39; [L1187] FCALL call #t~mem40 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem40=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1187] COND FALSE !(8529bv32 == #t~mem40) [L1187] havoc #t~mem40; [L1190] FCALL call #t~mem41 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem41=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1190] COND FALSE !(8544bv32 == #t~mem41) [L1190] havoc #t~mem41; [L1193] FCALL call #t~mem42 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem42=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1193] COND FALSE !(8545bv32 == #t~mem42) [L1193] havoc #t~mem42; [L1196] FCALL call #t~mem43 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem43=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1196] COND FALSE !(8560bv32 == #t~mem43) [L1196] havoc #t~mem43; [L1199] FCALL call #t~mem44 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem44=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1199] COND FALSE !(8561bv32 == #t~mem44) [L1199] havoc #t~mem44; [L1202] FCALL call #t~mem45 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem45=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1202] COND FALSE !(8448bv32 == #t~mem45) [L1202] havoc #t~mem45; [L1205] FCALL call #t~mem46 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem46=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1205] COND FALSE !(8576bv32 == #t~mem46) [L1205] havoc #t~mem46; [L1208] FCALL call #t~mem47 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem47=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1208] COND FALSE !(8577bv32 == #t~mem47) [L1208] havoc #t~mem47; [L1211] FCALL call #t~mem48 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem48=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1211] COND FALSE !(8592bv32 == #t~mem48) [L1211] havoc #t~mem48; [L1214] FCALL call #t~mem49 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem49=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1214] COND FALSE !(8593bv32 == #t~mem49) [L1214] havoc #t~mem49; [L1217] FCALL call #t~mem50 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem50=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1217] COND FALSE !(8608bv32 == #t~mem50) [L1217] havoc #t~mem50; [L1220] FCALL call #t~mem51 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem51=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1220] COND FALSE !(8609bv32 == #t~mem51) [L1220] havoc #t~mem51; [L1223] FCALL call #t~mem52 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem52=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1223] COND FALSE !(8640bv32 == #t~mem52) [L1223] havoc #t~mem52; [L1226] FCALL call #t~mem53 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem53=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1226] COND FALSE !(8641bv32 == #t~mem53) [L1226] havoc #t~mem53; [L1229] FCALL call #t~mem54 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem54=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1229] COND FALSE !(8656bv32 == #t~mem54) [L1229] havoc #t~mem54; [L1232] FCALL call #t~mem55 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem55=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1232] COND FALSE !(8657bv32 == #t~mem55) [L1232] havoc #t~mem55; [L1235] FCALL call #t~mem56 := read~intINTTYPE4({ base: ~s!base, offset: ~bvadd32(52bv32, ~s!offset) }, 4bv32); VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, #t~mem56=8672bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1235] COND TRUE 8672bv32 == #t~mem56 [L1235] havoc #t~mem56; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=1073741824bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1583] ~ret~0 := #t~nondet121; [L1583] havoc #t~nondet121; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1584] COND TRUE 3bv32 == ~blastFlag~0 VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1702] assert false; VAL [#in~s!base=2147483651bv32, #in~s!offset=0bv32, #NULL!base=0bv32, #NULL!offset=0bv32, ~#SSLv3_server_data~0!base=1073741826bv32, ~#SSLv3_server_data~0!offset=0bv32, ~blastFlag~0=3bv32, ~cb~0!base=0bv32, ~cb~0!offset=1bv32, ~got_new_session~0=1bv32, ~init~0=1bv32, ~ret~0=0bv32, ~s!base=2147483651bv32, ~s!offset=0bv32, ~skip~0=0bv32, ~state~0=8672bv32, ~Time~0=0bv32, ~tmp___10~0=1bv32, ~tmp___1~0=0bv32, ~tmp___2~0=0bv32, ~tmp___3~0=0bv32, ~tmp___4~0=0bv32, ~tmp___5~0=0bv32, ~tmp___6~0=0bv32, ~tmp___8~0=0bv32, ~tmp___9~0=1bv32, ~tmp~3=0bv32] [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1073741826:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={-2147483645:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={-2147483645:0}, SSLv3_server_data={1073741826:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={-2147483645:0}, SSLv3_server_data={1073741826:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={0:1}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1351] COND FALSE !(ret <= 0) [L1356] s->hit VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->hit=8192, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1356] COND TRUE s->hit [L1357] s->state = 8656 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1361] s->init_num = 0 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1554] EXPR s->session [L1554] EXPR s->s3 [L1554] EXPR (s->s3)->tmp.new_cipher [L1554] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1555] COND FALSE !(! tmp___9) [L1561] ret = __VERIFIER_nondet_int() [L1562] COND TRUE blastFlag == 2 [L1563] blastFlag = 3 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 3 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] ----- [2018-11-23 09:55:34,114 INFO L145 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/working_dir_bdaa62b1-1d22-49bb-bf3b-34da2f22021d/bin-2019/uautomizer/witness.graphml [2018-11-23 09:55:34,114 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 09:55:34,115 INFO L168 Benchmark]: Toolchain (without parser) took 12957.78 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 221.2 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -127.3 MB). Peak memory consumption was 94.0 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,116 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 09:55:34,116 INFO L168 Benchmark]: CACSL2BoogieTranslator took 533.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 143.1 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -178.2 MB). Peak memory consumption was 47.5 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,117 INFO L168 Benchmark]: Boogie Procedure Inliner took 30.02 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,117 INFO L168 Benchmark]: Boogie Preprocessor took 62.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,117 INFO L168 Benchmark]: RCFGBuilder took 2050.91 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 85.6 MB). Peak memory consumption was 85.6 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,117 INFO L168 Benchmark]: TraceAbstraction took 3124.63 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 78.1 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -136.1 MB). Peak memory consumption was 228.6 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,118 INFO L168 Benchmark]: Witness Printer took 7149.70 ms. Allocated memory is still 1.3 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 88.0 MB). Peak memory consumption was 88.0 MB. Max. memory is 11.5 GB. [2018-11-23 09:55:34,119 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 533.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 143.1 MB). Free memory was 943.3 MB in the beginning and 1.1 GB in the end (delta: -178.2 MB). Peak memory consumption was 47.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 30.02 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 62.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2050.91 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 85.6 MB). Peak memory consumption was 85.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 3124.63 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 78.1 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -136.1 MB). Peak memory consumption was 228.6 MB. Max. memory is 11.5 GB. * Witness Printer took 7149.70 ms. Allocated memory is still 1.3 GB. Free memory was 1.2 GB in the beginning and 1.1 GB in the end (delta: 88.0 MB). Peak memory consumption was 88.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 0bv32 could not be translated for associated CType STRUCT~~ssl_method_st?version~INT?ssl_new~*((*~SSL~0 ) : INT)?ssl_clear~*((*~SSL~0 ) : VOID)?ssl_free~*((*~SSL~0 ) : VOID)?ssl_accept~*((*~SSL~0 ) : INT)?ssl_connect~*((*~SSL~0 ) : INT)?ssl_read~*((*~SSL~0 *VOID INT ) : INT)?ssl_peek~*((*~SSL~0 *VOID INT ) : INT)?ssl_write~*((*~SSL~0 *VOID INT ) : INT)?ssl_shutdown~*((*~SSL~0 ) : INT)?ssl_renegotiate~*((*~SSL~0 ) : INT)?ssl_renegotiate_check~*((*~SSL~0 ) : INT)?ssl_ctrl~*((*~SSL~0 INT LONG *CHAR ) : LONG)?ssl_ctx_ctrl~*((*~SSL_CTX~0 INT LONG *CHAR ) : LONG)?get_cipher_by_char~*((*UCHAR ) : *~SSL_CIPHER~0)?put_cipher_by_char~*((*~SSL_CIPHER~0 *UCHAR ) : INT)?ssl_pending~*((*~SSL~0 ) : INT)?num_ciphers~*(() : INT)?get_cipher~*((UINT ) : *~SSL_CIPHER~0)?get_ssl_method~*((INT ) : *ssl_method_st)?get_timeout~*(() : LONG)?ssl3_enc~*ssl3_enc_method?ssl_version~*(() : INT)?ssl_callback_ctrl~*((*~SSL~0 INT *(() : VOID) ) : LONG)?ssl_ctx_callback_ctrl~*((*~SSL_CTX~0 INT *(() : VOID) ) : LONG)# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 1702]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L1042] static int init = 1; [L1043] static SSL_METHOD SSLv3_server_data ; VAL [\old(init)=0, \old(SSLv3_server_data)=null, \old(SSLv3_server_data)=null, init=1, SSLv3_server_data={1073741826:0}] [L1065] SSL *s ; [L1066] int tmp ; [L1070] s = malloc(sizeof(SSL)) [L1071] s->s3 = malloc(sizeof(struct ssl3_state_st)) [L1072] s->ctx = malloc(sizeof(SSL_CTX)) [L1073] s->session = malloc(sizeof(SSL_SESSION)) [L1074] s->state = 8464 VAL [init=1, malloc(sizeof(SSL))={-2147483645:0}, malloc(sizeof(SSL_CTX))={3:0}, malloc(sizeof(SSL_SESSION))={2:0}, malloc(sizeof(struct ssl3_state_st))={1:0}, s={-2147483645:0}, SSLv3_server_data={1073741826:0}] [L1075] CALL ssl3_accept(s) VAL [init=1, s={-2147483645:0}, SSLv3_server_data={1073741826:0}] [L1081] BUF_MEM *buf ; [L1082] unsigned long l ; [L1083] unsigned long Time ; [L1084] unsigned long tmp ; [L1085] void (*cb)() ; [L1086] long num1 ; [L1087] int ret ; [L1088] int new_state ; [L1089] int state ; [L1090] int skip ; [L1091] int got_new_session ; [L1092] int tmp___1 = __VERIFIER_nondet_int() ; [L1093] int tmp___2 = __VERIFIER_nondet_int() ; [L1094] int tmp___3 = __VERIFIER_nondet_int() ; [L1095] int tmp___4 = __VERIFIER_nondet_int() ; [L1096] int tmp___5 = __VERIFIER_nondet_int() ; [L1097] int tmp___6 = __VERIFIER_nondet_int() ; [L1098] int tmp___7 ; [L1099] long tmp___8 = __VERIFIER_nondet_long() ; [L1100] int tmp___9 = __VERIFIER_nondet_int() ; [L1101] int tmp___10 = __VERIFIER_nondet_int() ; [L1102] int blastFlag ; [L1106] blastFlag = 0 [L1107] s->hit=__VERIFIER_nondet_int () [L1108] s->state = 8464 [L1109] tmp = __VERIFIER_nondet_int() [L1110] Time = tmp [L1111] cb = (void (*)())((void *)0) [L1112] ret = -1 [L1113] skip = 0 [L1114] got_new_session = 0 [L1115] EXPR s->info_callback VAL [={0:0}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->info_callback={0:1}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1115] COND TRUE (unsigned long )s->info_callback != (unsigned long )((void *)0) [L1116] EXPR s->info_callback [L1116] cb = s->info_callback [L1120] EXPR s->in_handshake [L1120] s->in_handshake += 1 [L1121] COND FALSE !(tmp___1 & 12288) VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] EXPR s->cert VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->cert={1:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1130] COND FALSE !((unsigned long )s->cert == (unsigned long )((void *)0)) [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=0, got_new_session=0, init=1, ret=4294967295, s={-2147483645:0}, s={-2147483645:0}, s->state=8464, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND TRUE s->state == 8464 [L1323] s->shutdown = 0 [L1324] ret = __VERIFIER_nondet_int() [L1325] COND TRUE blastFlag == 0 [L1326] blastFlag = 1 VAL [={0:1}, blastFlag=1, got_new_session=0, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1330] COND FALSE !(ret <= 0) [L1335] got_new_session = 1 [L1336] s->state = 8496 [L1337] s->init_num = 0 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8464, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=1, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8496, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND TRUE s->state == 8496 [L1341] ret = __VERIFIER_nondet_int() [L1342] COND TRUE blastFlag == 1 [L1343] blastFlag = 2 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1351] COND FALSE !(ret <= 0) [L1356] s->hit VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->hit=8192, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1356] COND TRUE s->hit [L1357] s->state = 8656 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1361] s->init_num = 0 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8496, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={0:1}, blastFlag=2, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8656, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND TRUE s->state == 8656 [L1554] EXPR s->session [L1554] EXPR s->s3 [L1554] EXPR (s->s3)->tmp.new_cipher [L1554] (s->session)->cipher = (s->s3)->tmp.new_cipher [L1555] COND FALSE !(! tmp___9) [L1561] ret = __VERIFIER_nondet_int() [L1562] COND TRUE blastFlag == 2 [L1563] blastFlag = 3 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1567] COND FALSE !(ret <= 0) [L1572] s->state = 8672 [L1573] s->init_num = 0 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1574] COND FALSE !(! tmp___10) VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] EXPR s->s3 [L1661] EXPR (s->s3)->tmp.reuse_message VAL [={0:1}, (s->s3)->tmp.reuse_message=64, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->s3={1:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1661] COND FALSE !(! (s->s3)->tmp.reuse_message) [L1690] skip = 0 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1136] COND TRUE 1 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8656, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1138] EXPR s->state [L1138] state = s->state [L1139] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1139] COND FALSE !(s->state == 12292) [L1142] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1142] COND FALSE !(s->state == 16384) [L1145] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1145] COND FALSE !(s->state == 8192) [L1148] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1148] COND FALSE !(s->state == 24576) [L1151] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1151] COND FALSE !(s->state == 8195) [L1154] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1154] COND FALSE !(s->state == 8480) [L1157] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1157] COND FALSE !(s->state == 8481) [L1160] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1160] COND FALSE !(s->state == 8482) [L1163] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1163] COND FALSE !(s->state == 8464) [L1166] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1166] COND FALSE !(s->state == 8465) [L1169] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1169] COND FALSE !(s->state == 8466) [L1172] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1172] COND FALSE !(s->state == 8496) [L1175] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1175] COND FALSE !(s->state == 8497) [L1178] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1178] COND FALSE !(s->state == 8512) [L1181] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1181] COND FALSE !(s->state == 8513) [L1184] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1184] COND FALSE !(s->state == 8528) [L1187] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1187] COND FALSE !(s->state == 8529) [L1190] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1190] COND FALSE !(s->state == 8544) [L1193] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1193] COND FALSE !(s->state == 8545) [L1196] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1196] COND FALSE !(s->state == 8560) [L1199] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1199] COND FALSE !(s->state == 8561) [L1202] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1202] COND FALSE !(s->state == 8448) [L1205] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1205] COND FALSE !(s->state == 8576) [L1208] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1208] COND FALSE !(s->state == 8577) [L1211] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1211] COND FALSE !(s->state == 8592) [L1214] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1214] COND FALSE !(s->state == 8593) [L1217] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1217] COND FALSE !(s->state == 8608) [L1220] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1220] COND FALSE !(s->state == 8609) [L1223] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1223] COND FALSE !(s->state == 8640) [L1226] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1226] COND FALSE !(s->state == 8641) [L1229] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1229] COND FALSE !(s->state == 8656) [L1232] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1232] COND FALSE !(s->state == 8657) [L1235] EXPR s->state VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=1073741824, s={-2147483645:0}, s={-2147483645:0}, s->state=8672, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1235] COND TRUE s->state == 8672 [L1583] ret = __VERIFIER_nondet_int() [L1584] COND TRUE blastFlag == 3 VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] [L1702] __VERIFIER_error() VAL [={0:1}, blastFlag=3, got_new_session=1, init=1, ret=0, s={-2147483645:0}, s={-2147483645:0}, skip=0, SSLv3_server_data={1073741826:0}, state=8672, Time=0, tmp=0, tmp___1=0, tmp___10=1, tmp___2=0, tmp___3=0, tmp___4=0, tmp___5=0, tmp___6=0, tmp___8=0, tmp___9=1] - StatisticsResult: Ultimate Automizer benchmark data CFG has 4 procedures, 154 locations, 1 error locations. UNSAFE Result, 3.0s OverallTime, 4 OverallIterations, 4 TraceHistogramMax, 0.2s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 988 SDtfs, 453 SDslu, 610 SDs, 0 SdLazy, 44 SolverSat, 11 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 206 GetRequests, 203 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=489occurred in iteration=3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 3 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TraceCheckStatistics: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 340 NumberOfCodeBlocks, 340 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 206 ConstructedInterpolants, 0 QuantifiedInterpolants, 32258 SizeOfPredicates, 3 NumberOfNonLiveVariables, 791 ConjunctsInSsa, 6 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 50/50 InterpolantCoveringCapability, InvariantSynthesisStatistics: No data available, InterpolantConsolidationStatistics: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...